The plugin, with Saved Templates Addon enabled, allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the plugin's shortcode.
Create a page as any user with the following shortcode block:
[gutenberg_post_blocks id='a" style="animation-name:twentytwentyone-close-button-transition" onanimationend="alert(origin)//']
2021-08-26 (about 11 months ago)
2022-04-11 (about 4 months ago)