This vulnerability in ThemeHunk Gutenberg Blocks (unlimited-blocks) versions up to 1.2.8 allows reflected Cross-site Scripting (XSS) due to improper input neutralization during web page generation. The CVSS 3.1 score of 7.1 reflects a network attack vector with low attack complexity, no privileges required, but user interaction needed. The vulnerability impacts confidentiality, integrity, and availability with a scope change. No patch or official fix information is currently available.

Successful exploitation of this reflected XSS vulnerability could allow an attacker to execute arbitrary scripts in the context of a user's browser session, potentially leading to theft of sensitive information, session hijacking, or other malicious actions affecting confidentiality, integrity, and availability. However, no known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider disabling or restricting use of the affected Gutenberg Blocks plugin to mitigate risk. Monitor official ThemeHunk communications for updates and apply patches promptly once released.