CVE-2026-118803

Bricks Theme version 2.4.3 and before is vulnerable to an unauthenticated dynamic-data tag injection vulnerability within the query_result REST endpoint. The root cause allows anonymous attackers to manipulate the urlParams object, forcing the system to re-parse submitted values as Bricks dynamic...