Skip to content
Sign in
6.5 Medium

CVE-2025-30952 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdive Nexa Blocks…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdive Nexa Blocks nexa-blocks allows Stored XSS.This issue affects Nexa Blocks: from n/a through <= 1.1.0.

Affected products and versions

Product Affected versions Fixed in
Nexa Blocks 1.1 earliest → 1.1.0 No fix stated

Other CVEs of Nexa Blocks

The 3 CVEs of Nexa Blocks →
CVE-2026-25429 Deserialization of Untrusted Data vulnerability in wpdive Nexa Blocks nexa-blocks allows Object Injection.This issue… 9.8 Critical CVE-2025-30976 Server-Side Request Forgery (SSRF) vulnerability in wpdive Nexa Blocks nexa-blocks allows Server Side Request… 4.9 Medium
Track this CVE