Cross-Site Scripting Vulnerability in WP Travel Gutenberg Blocks by WordPress
CVE-2025-62063
Currently unrated
What is CVE-2025-62063?
A cross-site scripting vulnerability exists in WP Travel Gutenberg Blocks, affecting versions up to 3.9.2. This flaw allows attackers to inject malicious scripts into web pages viewed by users, potentially leading to session hijacking, data theft, and other security breaches. Proper input sanitization is not implemented, enabling the execution of harmful scripts when the affected plugin processes user input. Users should upgrade to the latest version to mitigate potential risks.
Affected Version(s)
WP Travel Gutenberg Blocks <= n/a