Advisories · Technology
cozythemes Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox.
Every CVE that names cozythemes Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute
- cozythemes Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'productRating.iconColor' Block Attribute
- cozythemes Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox
- Cross-site scripting (XSS)