Vulnerabilities > Jegstudio > Gutenverse > 1.2.0

DATE CVE VULNERABILITY TITLE RISK
2025-04-29 CVE-2025-2893 Cross-site Scripting vulnerability in Jegstudio Gutenverse
The Gutenverse – Ultimate Block Addons and Page Builder for Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's countdown Block in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping on user supplied attributes.
network
low complexity
jegstudio CWE-79
5.4
2024-08-29 CVE-2024-43920 Cross-site Scripting vulnerability in Jegstudio Gutenverse
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jegstudio Gutenverse allows Stored XSS.This issue affects Gutenverse: from n/a through 1.9.4.
network
low complexity
jegstudio CWE-79
5.4
2024-07-21 CVE-2024-38785 Unspecified vulnerability in Jegstudio Gutenverse
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jegstudio Gutenverse allows Stored XSS.This issue affects Gutenverse: from n/a through 1.9.2.
network
low complexity
jegstudio
5.4