Medium severity5.4NVD Advisory· Published Nov 29, 2021· Updated Jun 17, 2026

CVE-2021-24751

Description

The GenerateBlocks WordPress plugin before 1.4.0 does not validate the generateblocks/container block's tagName attribute, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Generateblocks/Generateblocks
cpe:2.3:a:generateblocks:generateblocks:*:*:*:*:*:wordpress:*:*
Range: <1.4.0
WordPress/GenerateBlocksdescription
WordPress/Generateblocksllm-fuzzy
Range: <1.4.0
Package: https://wordpress.org/plugins/generateblocks

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/e0131980-d2d3-4780-8a68-a81ee8c90b7anvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000