CVE-2021-24760 – Gutenberg PDF Viewer Block < 1.0.1 - Contributor+ Stored Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2021-24760

The Gutenberg PDF Viewer Block WordPress plugin before 1.0.1 does not sanitise and escape its block, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks. El plugin Gutenberg PDF Viewer Block de WordPress versiones anteriores a 1.0.1, no sanea ni escapa de su bloque, que podría permitir a usuarios con un rol tan bajo como el de Contribuyente llevar a cabo ataques de tipo Cross-Site Scripting • https://wpscan.com/vulnerability/aebf821f-1724-4e4c-8d42-5a94e509d271 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •