Threats tagged 'ghsa-mg54-xc87-q8w3'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.3%	CVE-2025-15678Nexter Blocks (WordPress plugin) · Cross-Site Scripting (XSS) Medium6.1EPSS 0.3%2026-08-06CVE Database V5CVE-2025-15678 Nexter Blocks WordPress plugin versions before 5.0.2 allow users with file upload permissions (such as Authors) to upload SVG files containing malicious JavaScript. These files are not properly sanitized, leading to stored Cross-Site Scripting (XSS) vulnerabilities that execute when the SVG file is accessed. EPSS 0.3%Vulnerability CWE-79 #ghsa-mg54-xc87-q8w3	CVE Database V5	2026-08-06

Page 1 of 1