CVE-2024-8241

Nova Blocks by Pixelgrade for WordPress is affected by a Stored XSS in the wp:separator Gutenberg block via the align attribute, affecting versions up to 2.1.7. Root cause: insufficient input sanitization and output escaping of user-supplied attributes. Impact: authenticated attackers with contri...