What is GHSA-cpgh-j438-6wxq?

GHSA-cpgh-j438-6wxq is a security advisory published by GitHub Security Advisories with Medium severity. The Responsive Blocks WordPress plugin before 2.3.0 does not sanitise or escape some of the...

Which CVE IDs does GHSA-cpgh-j438-6wxq cover?

GHSA-cpgh-j438-6wxq covers the following CVE IDs: CVE-2026-97315. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-cpgh-j438-6wxq?

GHSA-cpgh-j438-6wxq has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

GHSA-cpgh-j438-6wxqMediumCVSS 5.4

The Responsive Blocks WordPress plugin before 2.3.0 does not sanitise or escape some of the...

Vendor

GitHub Security Advisories

Published

October 14, 2026

Last Modified

October 14, 2026

🔗 CVE IDs covered (1)

CVE-2026-97315 →

📋 Description

The Responsive Blocks WordPress plugin before 2.3.0 does not sanitise or escape some of the values submitted with its Form block before adding them to the HTML notification email sent to the site owner, allowing unauthenticated users to inject arbitrary HTML, such as phishing links, into that email.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-97315
https://wpscan.com/vulnerability/83713678-7efc-4cfc-ba24-c624a1ef8622
https://github.com/advisories/GHSA-cpgh-j438-6wxq