Gutenslider < 5.2.0 - Contributor+ Stored XSS

The plugin does not escape the minWidth attribute of a Gutenburg block, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks

PoC

As a contributor (or above), create/edit a post, put the below code while in Code Editor mode, and view/preview the post (The payload is specific to the TwentyTwentyOne theme and will trigger without user interaction, but could be changed)

Slider AAAA