Advisories · Technology
Otter Blocks.
Every CVE that names Otter Blocks among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Otter Blocks < 3.2.8 - Unauthenticated Stored XSS via Dynamic Content Render Filter
- Otter Blocks
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Otter Blocks < 3.2.8 - Unauthenticated Restricted Block Content Disclosure via REST API
- Otter Blocks
- Information disclosure
- CVSS 5.3 Medium
Otter Blocks 3.1.1 - 3.2.7 - Unauthenticated Non-Public Content Disclosure via REST API
- Otter Blocks
- Information disclosure
- CVSS 6.8 Medium
Otter Blocks < 3.2.8 - Contributor+ Stored XSS via Block Style Attributes
- Otter Blocks
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Otter Blocks < 3.2.3 - Unauthenticated Open Redirect via Stripe Checkout Block
- Otter Blocks
- Open redirect
- CVSS 6.1 Medium
Otter Blocks < 2.6.6 - Contributor+ Stored XSS
- Otter Blocks