Skip to content

CVE record · 1 source

CVE-2026-24533

CVSS 6.5

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes Cozy Blocks cozy-addons allows…

Vendor: CozyThemes
Product: Cozy Blocks
CVSS v3.1: 6.5 AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Weakness: CWE-79

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

5

CVE NVD 3d ago

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes Cozy Blocks cozy-addons allows…

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes Cozy Blocks cozy-addons allows Stored XSS.This issue affects Cozy Blocks: from n/a through 2.2.27.

CVSS 6.5 CVE-2026-24533 CozyThemes