CVE-2024-4305

Name of the Vulnerable Software and Affected Versions The Post Grid Gutenberg Blocks and WordPress Blog Plugin version prior to 4.1.0

Description The issue concerns a lack of validation and escaping of certain block options, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. This affects users with the contributor role and above.

Recommendations For versions prior to 4.1.0, update to version 4.1.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the vulnerable block options to minimize the risk of exploitation.