← CVE Intelligence

CVE-2021-24546

EditorsKit < 1.31.6 - Contributor+ Arbitrary PHP Code Execution PUBLISHED

Description (CNA)

The Gutenberg Block Editor Toolkit – EditorsKit WordPress plugin before 1.31.6 does not sanitise and validate the Conditional Logic of the Custom Visibility settings, allowing users with a role as low contributor to execute Arbitrary PHP code

Affected (CNA)

Vendor / productVersions
Unknown / Gutenberg Block Editor Toolkit – EditorsKitaffected 1.31.6 before 1.31.6

CWE

CWE-94

References

ADP enrichment

CVE

No English description supplied.