Gutenberg Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Gutenberg Project records in CISA KEV

No Gutenberg Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Gutenberg · all components

TI-2022-14986 CVE-2022-33994 · GHSA-g2cf-r83x-vvf5

LOW 16

The Gutenberg plugin through 13.7.3 for WordPress allows stored XSS by the Contributor role via an SVG document to the "Insert from URL" feature.

CVSS 3.1LOW 3.0 Network Low privileges User interaction EPSS 0.00712 Published 2022-07-30 No fix listed CWE-79