Threats tagged 'ghsa-q8hw-8hvr-gcp7'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.4	CVE-2026-118800The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder plugin for Medium6.42026-11-07GCVE DatabaseCVE-2026-118800 The aBlocks WordPress plugin up to version 2.18.0 is vulnerable to stored cross-site scripting (XSS) via the 'headingTag' parameter. Authenticated users with contributor-level access or higher can inject malicious scripts that execute when other users view the affected pages. This vulnerability arises from insufficient input sanitization and output escaping. Report on CVE-2026-118800 Vulnerability CWE-79 #ghsa-q8hw-8hvr-gcp7	GCVE Database	2026-11-07

Page 1 of 1