CVE-2024-37457

Name of the Vulnerable Software and Affected Versions Ultimate Blocks – Gutenberg Blocks Plugin versions 3.1.9 and earlier

Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS in the Ultimate Blocks – Gutenberg Blocks Plugin.

Recommendations For Ultimate Blocks – Gutenberg Blocks Plugin versions 3.1.9 and earlier, update to a version later than 3.1.9 to resolve the issue. As a temporary workaround, consider restricting access to the plugin's functionality to minimize the risk of exploitation.