CVE-2026-97315

5.4 Moyenne

Publiée le 14/10/2026 à 13:17 · Modifiée le 14/10/2026 à 18:14 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The Responsive Blocks WordPress plugin before 2.3.0 does not sanitise or escape some of the values submitted with its Form block before adding them to the HTML notification email sent to the site owner, allowing unauthenticated users to inject arbitrary HTML, such as phishing links, into that email.

Traduire en français

Produits concernés

Unknown Responsive Blocks

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.4 Moyenne	contact@wpscan.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-74

Références

https://wpscan.com/vulnerability/83713678-7efc-4cfc-ba24-c624a1ef8622/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories