A Cross Site Scripting (XSS) vulnerability exists in the WordPress Rootblox plugin versions up to 1.0.7. This issue allows for Stored XSS, potentially impacting users who interact with affected pages. The vulnerability is addressed in version 1.0.8. Defenders managing WordPress environments using the Rootblox plugin should assess exposure and prioritize updates to mitigate potential XSS attacks. This invo [truncated]
The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'layoutCircle.alignment' Block Attribute in all versions up to, and including, 2.2.11 due to insufficient input sanitization and output escaping. This vulnerability allows authenticated attackers with contributor-level access and above to [truncated]
