Skip to content
Sign in
6.5 Medium

CVE-2026-39742 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web /…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allows Stored XSS.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through 3.8.0.2.

Affected products and versions

Product Affected versions Fixed in
Gutenberg Blocks by Kadence Blocks 3.8 earliest → 3.8.0.2 No fix stated

Other CVEs of Gutenberg Blocks by Kadence Blocks

The 4 CVEs of Gutenberg Blocks by Kadence Blocks →
CVE-2026-115602 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web /… 6.5 Medium CVE-2026-105890 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web /… 6.5 Medium CVE-2026-103354 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web /… 7.1 High
Track this CVE