Input validation vulnerability in Page Builder Gutenberg Blocks – CoBlocks 3.1.9

The Page Builder Gutenberg Blocks – CoBlocks plugin for WordPress has a security vulnerability that could affect all versions up to 3.1.9. This vulnerability, known as Stored Cross-Site Scripting, can be exploited through the Social Profiles widget. This is due to the plugin not properly sanitizing and escaping user-supplied attributes. This means that someone with contributor-level access or higher could potentially inject harmful web scripts into pages that users access.