CVE-2025-30952

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdive Nexa Blocks nexa-blocks allows Stored XSS.This issue affects Nexa Blocks: from n/a through = 1.1.0...

CVE-2025-30952

CVE-2025-30952 is a Stored XSS in Nexa Blocks (WordPress) due to improper input neutralization during web page generation. Affected versions are Nexa Blocks up to 1.1.0. The CVE is listed with CVSS v3.1 base score 6.5 (Medium). The connected Wordfence vulnerability report notes the patch status a...

WordPress Nexa Blocks plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Prissy in WordPress Plugin Nexa Blocks versions = 1.1.0...