CVE-2021-24640

The WordPress plugin Gutenslider (Slider Block) before 5.2.0 is vulnerable to a stored XSS due to not escaping the minWidth attribute in a Gutenberg block. This can be exploited by users with as little as Contributor privileges (no user interaction required in some PoCs) to inject arbitrary scrip...