Reflected XSS Vulnerability in The Plus Blocks for Block Editor | Gutenberg

CVE-2024-30435

What is CVE-2024-30435?

The Plus Blocks for Block Editor | Gutenberg, developed by POSIMYTH, is affected by a reflected cross-site scripting (XSS) vulnerability that arises from improper neutralization of input during web page generation. This weakness allows malicious users to manipulate web content, potentially leading to unauthorized access to sensitive user data. The vulnerability impacts various versions of the plugin, including those prior to 3.2.5, underscoring the necessity for users to update to secure versions to mitigate risks. Proper input validation and sanitization practices are essential for safeguarding applications against such attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References