cleantalk
Vulnerabilities and Security Researches

Qubely – Advanced Gutenberg Blocks, 4ea3ca240987b6d48c7004c77467f7f509448316

Published on
Feb 07, 2023
Research Description
Qubely &#8211; Advanced Gutenberg Blocks [qubely] < 1.8.5 WordPress Qubely – Advanced Gutenberg Blocks Plugin <= 1.8.4 is vulnerable to Cross Site Scripting (XSS) Update the WordPress Qubely – Advanced Gutenberg Blocks plugin to the latest available version (at least 1.8.5). Wordfence discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Qubely – Advanced Gutenberg Blocks Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 1.8.5.
Affected versions
max 1.8.5.
Status
vulnerable