Input validation vulnerability in Cozy Blocks – Page Builder for Gutenberg & Site Editor, Post Blocks, WooCommerce Blocks, Magazine Blocks, WordPress Gutenberg Blocks, Patterns and Templates Library 2.0.11

The Cozy Blocks plugin for WordPress has a security issue called Stored Cross-Site Scripting. This happens because the plugin doesn’t properly clean up user input and output. This allows attackers who are logged in and have contributor or higher level access to insert harmful code into pages. Whenever a user visits these pages, the code will be executed.