Stored Cross-Site Scripting in Essential Blocks for WordPress

CVE-2023-7071

What is CVE-2023-7071?

The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is susceptible to Stored Cross-Site Scripting. This vulnerability arises through the Table of Contents block due to inadequate input sanitization and output escaping in versions up to and including 4.4.6. As a result, authenticated attackers with contributor-level permissions can exploit this flaw to inject arbitrary web scripts into pages, leading to execution whenever a user visits those compromised pages.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References