- Son 7 gün
- CWE-79
CVE-2026-109975
Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute
cozythemes Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox
- Yayımlandı
- Güncellendi
- 28 Eki 2026
- Açık yaşı
- 0 gün
- Kaydı açan
- Wordfence
Özet
Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.
The Cozy Blocks – Website Builder for WordPress Block Editor | Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content (block attribute icon.view / icon.layout / icon.gap)' parameter in all versions up to, and including, 2.2.27 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Although wp_kses_post is applied on save, it does not neutralize a quote-only attribute-breakout payload containing no '<' character, leaving the block comment and its decoded JSON attributes intact and exploitable at render time.
Etkilenen sürümler1 yazılım
| Yazılım | Etkilenen | Düzeltildiği sürüm |
|---|---|---|
| cozythemes Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox | ≤ 2.2.27 | – |
Kaynaklar9 kaynak
- CVE.org kaydı
- NVD kaydı
- wordfence.com/…lities/id/f4041795-8131-459f-9156-5ecf5d6086f6 Diğer
- plugins.trac.wordpress.org/…2.2.27/blocks/featured-product-tabs/render.php Diğer
- plugins.trac.wordpress.org/…2.2.27/blocks/featured-product-tabs/render.php Diğer
- plugins.trac.wordpress.org/…2.2.27/blocks/featured-product-tabs/render.php Diğer
- plugins.trac.wordpress.org/…2.2.27/blocks/featured-product-tabs/render.php Diğer
- plugins.trac.wordpress.org/…2.2.27/blocks/featured-product-tabs/block.json Diğer
- plugins.trac.wordpress.org/changeset Diğer
Kayıt geçmişi
- Yayımlandı