CVE-2026-15333

CVE-2026-15333 affects Cozy Blocks (WordPress plugin) up to version 2.2.11. The flaw is a stored Cross-Site Scripting vulnerability in the cozyCustomFont Block Attribute, caused by insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access or higher...