Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-88993 2 Areoi, Wordpress-extensions 2 All Bootstrap Blocks, All Bootstrap Blocks 2026-09-28 6.8 Medium
The All Bootstrap Blocks WordPress plugin through 1.3.31 does not properly escape a block attribute before outputting it in HTML tag-name position, allowing users with Contributor-level access and above to inject arbitrary web scripts that execute when the affected content is viewed.