Input validation vulnerability in Cozy Blocks – Page Builder for Gutenberg & Site Editor, Post Blocks, WooCommerce Blocks, Magazine Blocks, WordPress Gutenberg Blocks, Patterns and Templates Library 2.0.15

The Cozy Blocks plugin for WordPress has a security issue called Stored Cross-Site Scripting, which affects versions up to 2.0.15. This is because the plugin does not properly clean and protect user input, allowing attackers with contributor-level access or higher to insert harmful web scripts into pages. These scripts will run whenever a user visits the affected page.