All 2 CVE vulnerabilities found in Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox, with AI-generated Chinese analysis, references, and POCs.
Vendor: cozythemes
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-109975 | Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute CWE-79 | 6.4 | Medium | 2026-10-28 |
| CVE-2026-109978 | Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'productRating.iconColor' Block Attribute CWE-79 | 6.4 | Medium | 2026-10-28 |
All 2 known CVE vulnerabilities affecting Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox with full Chinese analysis, references, and POCs where available.