Gutenberg PDF Viewer Block <= 1.0 - Cross-Site Scripting
mediumThe Gutenberg PDF Viewer Block WordPress plugin before 1.0.1 does not sanitise and escape its block, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks.
- CVSS:
- 5.4
- Affected:
- up to 1.0.1
- Fixed in:
- 1.0.1
- Disclosed:
- Sep 20, 2021