title: EditorsKit < 1.31.6 - Contributor+ Arbitrary PHP Code Execution
description: The Gutenberg Block Editor Toolkit – EditorsKit WordPress plugin before 1.31.6 does not sanitise and validate the Conditional Logic of the Custom Visibility settings, allowing users with a role as low contributor to execute Arbitrary PHP code
problem types: CWE-94 Improper Control of Generation of Code ('Code Injection')
affected:
{
product: Gutenberg Block Editor Toolkit – EditorsKit
vendor: Unknown
versions:
lessThan: 1.31.6, status: affected, version: 1.31.6, versionType: custom
}