CVE-2024-3818

CVE-2024-3818 affects the Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates WordPress plugin. The issue is a DOM-based stored XSS in the Social Icons block, arising from insufficient input sanitization/output escaping on user-supplied attributes. Affected versions include all...

CVE-2024-5595

CVE-2024-5595 affects the WordPress plugin “Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates” (pre 4.7.0). Root cause: the plugin does not validate/escape certain block options before output, enablingStored XSS when the block is embedded in a page/post by users with Contribu...