This vulnerability involves improper neutralization of input in ThemeHunk Gutenberg Blocks, allowing cross-site scripting attacks. It affects all versions up to and including 1.2.8. The CVSS 3.1 base score is 6.5, indicating a medium severity with network attack vector, low attack complexity, requiring privileges and user interaction, and impacts confidentiality, integrity, and availability partially. No vendor patch or advisory details are provided, so remediation status is unknown.

Successful exploitation could allow an attacker with some privileges and requiring user interaction to execute malicious scripts in the context of the affected web pages, potentially leading to partial compromise of confidentiality, integrity, and availability of the affected system or user data. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit privileges of users who can interact with the vulnerable blocks and avoid exposing the affected versions in untrusted environments.