CVE-2025-60138

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through = 2.6...

CVE-2025-60161

CVE-2025-60161: ZoloBlocks (ZoloBlocks plugin)

CVE-2025-60138 WordPress SKT Blocks plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through = 2.6...

CVE-2025-60138

CVE-2025-60138 corresponds to a stored XSS in the SKT Blocks WordPress plugin. The vulnerability is caused by improper input neutralization during web page generation, enabling stored cross-site scripting. Affected range is SKT Blocks from n/a through 2.5. According to Wordfence Intelligence, thi...

CVE-2025-57692

PiranhaCMS 12.0 allows stored XSS in the Text content block of Standard and Standard Archive Pages via /manager/pages, enabling execution of arbitrary JavaScript in another user s browser...

CVE-2025-60095: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in Benjamin Intal Stackable stackable-ultimate-gutenberg-blocks allows Retrieve Embedded Sensitive Data.This issue affects Stackable: from n/a through = 3.18.1...

CVE-2025-60094: Missing Authorization

Missing Authorization vulnerability in Benjamin Intal Stackable stackable-ultimate-gutenberg-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stackable: from n/a through = 3.18.1...

CVE-2025-60138: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through = 2.6...

CVE-2025-57692

PiranhaCMS 12.0 and the Piranha .NET Core rewrite package are vulnerable to a stored Cross-site Scripting (XSS) vulnerability. The root cause is improper input sanitization in the Text content block of Standard and Standard Archive Pages accessed via the /manager/pages endpoint. An authenticated ...

WordPress plugin SKT Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-39581

Name of the Vulnerable Software and Affected Versions SKT Blocks versions through 2.5 Description The software contains a flaw related to improper handling of user-supplied data during the creation of web pages, which can lead to Stored Cross-site Scripting XSS. This allows an attacker to inject...

CVE-2025-60128: Missing Authorization

Missing Authorization vulnerability in WP Delicious Delisho dr-widgets-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Delisho: from n/a through = 1.1.3...

CVE-2025-57692

PiranhaCMS 12.0 allows stored XSS in the Text content block of Standard and Standard Archive Pages via /manager/pages, enabling execution of arbitrary JavaScript in another user s browser...

PT-2025-39678

Name of the Vulnerable Software and Affected Versions PiranhaCMS version 12.0 Description The software contains a stored cross-site scripting XSS issue in the Text content block of Standard and Standard Archive Pages. This allows for the execution of arbitrary JavaScript in another user's browser...

CVE-2025-58258

Missing Authorization vulnerability in nK Lazy Blocks lazy-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lazy Blocks: from n/a through = 4.1.0...

CVE-2025-59573

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in CozyThemes Cozy Blocks cozy-addons allows Code Injection.This issue affects Cozy Blocks: from n/a through = 2.1.29...

CVE-2025-59561

Missing Authorization vulnerability in hashthemes Smart Blocks smart-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Blocks: from n/a through = 2.4...

Our plan for a more secure npm supply chain

Open source software is the bedrock of the modern software industry. Its collaborative nature and vast ecosystem empower developers worldwide, driving efficiency and progress at an unprecedented scale. This scale also presents unique vulnerabilities that are continually tested and under attack by...

CVE-2025-59573

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in CozyThemes Cozy Blocks cozy-addons allows Code Injection.This issue affects Cozy Blocks: from n/a through = 2.1.29...

CVE-2025-59561

Missing Authorization vulnerability in hashthemes Smart Blocks smart-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Blocks: from n/a through = 2.4...