Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-38000
6.5
MEDIUMCVSS v3
Severity scale
010
Description
Auth. Stored (contributor+) Cross-Site Scripting (XSS) vulnerability in WordPress core 6.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.1.3, from 6.0 through 6.0.5, from 5.9 through 5.9.7 and Gutenberg plugin <= 16.8.0 versions.
WordPress/gutenberg
GitHubThe Block Editor project for WordPress and beyond. Plugin is available from the official repository.
GitHubThe Block Editor project for WordPress and beyond. Plugin is available from the official repository.<= 16.8.0NVD