CVE Database /
CVE-2023-7071
CVE · Medium
CVE-2023-7071 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.4.7
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-7071
|
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.4.7 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 4.4.7
|
4.4.7 |
2024-01-09 |
—
|
CVE-2023-7071
The Essential Blocks plugin for Gutenberg contained a cross-site scripting vulnerability that allowed attackers to inject malicious scripts into websites, potentially enabling them to redirect users, display unwanted advertisements, or execute arbitrary HTML code when visitors accessed the site. Webbernaut discovered this flaw and reported it to the development team. The vulnerability was patched in version 4.4.7, and users running earlier versions should upgrade immediately.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings