Medium severity6.4NVD Advisory· Published Feb 26, 2025· Updated Jun 17, 2026
CVE-2024-13803
CVE-2024-13803
Description
The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-marker’ parameter in all versions up to, and including, 5.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- cpe:2.3:a:wpdeveloper:essential_blocks:*:*:*:*:free:wordpress:*:*Range: <=5.2.3
<=5.2.3+ 1 more
- (no CPE)range: <=5.2.3
- (no CPE)
- wpdevteam/Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patternsv5Range: 0
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.