Skip to content
OpenAdvisories
Unscored CVE-2021-24640 EUVD-2021-11552GHSA-36hv-f25w-387h

Gutenslider < 5.2.0 - Contributor+ Stored XSS

Published Sep 20, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The WordPress Slider Block Gutenslider plugin before 5.2.0 does not escape the minWidth attribute of a Gutenburg block, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks

Affected products

VendorProductAffectedFixed
— WordPress Slider Block Gutenslider 5.2.0 – < 5.2.0 5.2.0

References