CVE Database /
CVE-2024-5595
CVE · Medium
CVE-2024-5595 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.7.0
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-5595
|
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.7.0 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 4.7.0
|
4.7.0 |
2024-07-12 |
—
|
CVE-2024-5595
The Essential Blocks plugin through version 4.6.1 contains a stored cross-site scripting vulnerability in its post-carousel block that allows authenticated users with contributor permissions or higher to execute malicious scripts. The flaw stems from inadequate sanitization of user-supplied block attributes and insufficient escaping when rendering output, enabling attackers to embed arbitrary code that executes for anyone viewing the affected page. This issue was resolved in version 4.7.0.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings