1 matches found
CVE-2026-6551: Improper Neutralization of Input During Web Page Generation
The Timeline Blocks for Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titleTag' attribute of the timeline-blocks/tb-timeline-blocks block in all versions up to, and including, 1.1.10 due to insufficient input sanitization and output escaping on user supplied...
6.4CVSS6AI score0.00349EPSS
SaveExploits0References2
20