{ "schema_version": "1.4.0", "id": "GHSA-mv5h-6x7w-c8pm", "modified": "2022-05-24T19:17:47Z", "published": "2022-05-24T19:17:47Z", "aliases": [ "CVE-2021-24760" ], "details": "The Gutenberg PDF Viewer Block WordPress plugin before 1.0.1 does not sanitise and escape its block, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-24760" }, { "type": "WEB", "url": "https://wpscan.com/vulnerability/aebf821f-1724-4e4c-8d42-5a94e509d271" } ], "database_specific": { "cwe_ids": [ "CWE-79" ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2021-10-18T14:15:00Z" } }