Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24640

Gutenslider < 5.2.0 - Contributor+ Stored XSS

Description

The WordPress Slider Block Gutenslider plugin before 5.2.0 does not escape the minWidth attribute of a Gutenburg block, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WordPress Slider Block Gutenslider

  • 5.2.0 to < 5.2.0affected

References