CVE-2021-24546CWE-94

EditorsKit < 1.31.6 - Contributor+ Arbitrary PHP Code Execution

published October 11, 2021

CVSS
—
EPSS
2%
Percentile
78.5
In the wild
Unconfirmed
What it is

The Gutenberg Block Editor Toolkit – EditorsKit WordPress plugin before 1.31.6 does not sanitise and validate the Conditional Logic of the Custom Visibility settings, allowing users with a role as low contributor to execute Arbitrary PHP code

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01811 · 78.5th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2021-10-11T10:45Z
EPSS history
Timeline
  • 11 OCT 10:45Z
    EditorsKit < 1.31.6 - Contributor+ Arbitrary PHP Code Execution
    cvelistv5