CVE-2024-43335
MEDIUM
5.4
CVSS 3.1
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CyberChimps Responsive Blocks – WordPress Gutenberg Blocks allows Stored XSS.This issue affects Responsive Blocks – WordPress Gutenberg Blocks: from n/a through 1.8.8.
Affected WordPress components
-
Responsive Blocks – Page Builder for Blocks & Patterns Plugin · responsive-block-editor-addonsUp to and including 1.8.8View on WordPress.org
A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.
Affected products and versions
- CyberChimps Responsive Blocks – WordPress Gutenberg Blocks — Up to and including 1.8.8
- cyberchimps responsive_blocks — Before 1.8.9
References
- patchstack.com https://patchstack.com/database/vulnerability/responsive-block-editor-addons/wordpress-responsive-blocks-wordpress-gutenberg-blocks-plugin-1-8-8-cross-site-scripting-xss-vulnerability?_s_id=cve Third Party Advisory
- nvd.nist.gov Official NVD record