Stored XSS in Gutenverse WordPress Plugin via Admin Settings

Executive Summary

The Gutenverse – WordPress Blocks, Page Builder & Site Editor plugin for WordPress has a Stored Cross-Site Scripting (XSS) vulnerability in all versions up to and including 3.8.0. This vulnerability arises because the plugin does not properly sanitize input or escape output in the admin settings.

Authenticated users with editor-level permissions or higher can exploit this flaw to inject arbitrary web scripts into pages. These scripts execute whenever any user accesses the infected page.

This vulnerability specifically affects multi-site WordPress installations and installations where the unfiltered_html capability has been disabled.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow attackers with editor-level access to inject malicious scripts that execute in the browsers of users visiting the affected pages.

Such script execution can lead to theft of user credentials, session hijacking, defacement, or other malicious actions that compromise the integrity and confidentiality of the website and its users.

Because the vulnerability requires authenticated access with elevated permissions, the risk is somewhat limited but still significant in environments where multiple users have editor or higher roles.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows authenticated attackers with editor-level permissions and above to inject arbitrary web scripts via stored cross-site scripting (XSS) in multi-site installations or where unfiltered_html is disabled.

Such XSS vulnerabilities can lead to unauthorized access to user data or session hijacking, which may impact the confidentiality and integrity of personal data.

Therefore, this vulnerability could potentially affect compliance with data protection regulations like GDPR and HIPAA by exposing personal or sensitive information through malicious script execution.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, you should update the Gutenverse – WordPress Blocks, Page Builder & Site Editor plugin to a version later than 3.8.0 where the issue is fixed.

Additionally, ensure that your WordPress installation is not a multi-site setup or that the unfiltered_html setting is enabled, as the vulnerability only affects multi-site installations or those with unfiltered_html disabled.

Limit editor-level permissions and above to trusted users only, since authenticated users with these permissions can exploit this vulnerability.

Useful 0 Not Useful 0