Stored Cross-Site Scripting Vulnerability in Getwid – Gutenberg Blocks Plugin

CVE-2024-1948

What is CVE-2024-1948?

The Getwid – Gutenberg Blocks plugin for WordPress is affected by a Stored Cross-Site Scripting vulnerability due to inadequate input sanitization and output escaping. This vulnerability allows authenticated users with contributor roles or higher to inject malicious scripts into the block content. These arbitrary scripts can then execute in the context of users accessing the compromised pages, posing significant security risks. It is crucial for users to ensure they are using a patched version of the plugin to mitigate potential exposure.

References