Medium severity6.4NVD Advisory· Published Jan 30, 2025· Updated Jun 17, 2026
CVE-2024-13732
CVE-2024-13732
Description
The Responsive Blocks – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘section_tag’ parameter in all versions up to, and including, 1.9.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4<=1.9.9+ 1 more
- (no CPE)range: <=1.9.9
- (no CPE)
- cyberchimps/Responsive Blocks – Page Builder for Blocks & Patternsv5Range: 0
- cpe:2.3:a:cyberchimps:responsive_blocks:*:*:*:*:*:wordpress:*:*Range: <2.0.0
Patches
Vulnerability mechanics
References
4- plugins.trac.wordpress.org/changeset/3231017/nvdPatch
- www.wordfence.com/threat-intel/vulnerabilities/id/1c0e5c85-72c3-4f09-aade-ec5a82b9cc41nvdThird Party Advisory
- plugins.trac.wordpress.org/browser/responsive-block-editor-addons/trunk/src/blocks/post-carousel/index.phpnvdProduct
- wordpress.org/plugins/responsive-block-editor-addonsnvdProduct
News mentions
0No linked articles in our index yet.