Medium
CVE-2026-97070
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 14
Reset filters
Medium
CVE-2026-19948
Cozy Blocks <= 2.2.17 - Missing Authorization to Unauthenticated Unpublished Product Information Disclosure via 'wishlistData' Parameter
Medium
CVE-2026-75019
Cozy Blocks <= 2.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via cozyHoverEffect Block Attribute
Medium
CVE-2026-15950
Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layoutCircle.alignment' Block Attribute
Medium
CVE-2026-15393
Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postMeta.font.size' Block Attribute
Medium
CVE-2026-15334
Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute
Medium
CVE-2026-15333
Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cozyCustomFont' Block Attribute
Medium
CVE-2025-59573
Cozy Blocks <= 2.1.29 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2025-47485
Cozy Blocks <= 2.1.22 - Missing Authorization
Medium
CVE-2025-30838
Cozy Blocks <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-50502
Cozy Blocks <= 2.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-50441
Cozy Blocks <= 2.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-47355
Cozy Blocks <= 2.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.