Skip to content
Sign in
7.1 High

CVE-2026-25438 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk Gutenberg Blocks unlimited-blocks allows Reflected XSS.This issue affects Gutenberg Blocks: from n/a through <= 1.2.8.

Affected products and versions

Product Affected versions Fixed in
Gutenberg Blocks 1.2 earliest → 1.2.8 No fix stated

Other CVEs of Gutenberg Blocks

The 2 CVEs of Gutenberg Blocks →
CVE-2024-44049 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk… 6.5 Medium
Track this CVE