Content Blocks Builder Vulnerabilities

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CBB Team Content Blocks Builder allows Stored XSS.This issue affects Content Blocks Builder: from n/a through 2.7.6.

Affected:

up to 2.7.7

Fixed in:

2.7.7

Disclosed:

Jan 9, 2025

CVE-2025-22810 on NVD →

The Content Blocks Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.7.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in...

CVSS:

6.4

Affected:

up to 2.7.6

Fixed in:

2.7.7

Disclosed:

Jan 7, 2025

CVE-2025-22810 on NVD →

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Affected:

up to 2.3.17

Fixed in:

2.3.17

CVE-2023-33999 on NVD →