CVE-2024-56245

Name of the Vulnerable Software and Affected Versions Leap13 Premium Blocks – Gutenberg Blocks for WordPress versions through 2.1.42

Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to inject malicious scripts into web pages.

Recommendations For versions through 2.1.42, update to a version later than 2.1.42 to resolve the issue. As a temporary workaround, consider restricting access to the plugin's functionality until a patch is available. Avoid using the plugin's features that allow user input until the issue is resolved.