Authenticated Block Import leading to Stored Cross-Site Scripting (XSS) vulnerability discovered by Ramuel Gall in WordPress Starter Templates plugin (versions <= 2.7.0).
Update the WordPress Starter Templates plugin to the latest available version (at least 2.7.1).