Vulnerabilities > Motopress > Getwid > 2.0.12

DATE CVE VULNERABILITY TITLE RISK
2024-11-20 CVE-2024-10872 Cross-site Scripting vulnerability in Motopress Getwid
The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `template-post-custom-field` block in all versions up to, and including, 2.0.12 due to insufficient input sanitization and output escaping.
network
low complexity
motopress CWE-79
5.4