Input validation vulnerability in ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns 2.3.10

The ZoloBlocks plugin used in WordPress has a security issue that allows attackers to insert harmful code into specific sections of the website. This vulnerability affects versions 2.3.10 and below because the plugin does not properly clean and protect user-provided information in various parts of the website, such as Google Maps, image galleries, and text links. This means that someone with contributor-level access or higher can exploit this vulnerability to inject malicious code that will run whenever someone visits the affected page.

Detected in:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.