Threats tagged 'ghsa-c6m9-cmc6-g435'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.4	CVE-2025-12475The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Medium6.42025-10-30GCVE DatabaseCVE-2025-12475 The Blocksy Companion WordPress plugin versions up to 2.1.14 contain a stored cross-site scripting (XSS) vulnerability in the 'blocksy_newsletter_subscribe' shortcode. This flaw arises from insufficient sanitization and escaping of user-supplied attributes, allowing authenticated users with contributor-level access or higher to inject malicious scripts that execute when other users view the affected pages. Report on CVE-2025-12475 Vulnerability CWE-79 #ghsa-c6m9-cmc6-g435	GCVE Database	2025-10-30

Page 1 of 1