Vulnerabilities > Creativethemes > Blocksy > 2.0.49

DATE CVE VULNERABILITY TITLE RISK
2024-12-05 CVE-2024-11420 Cross-site Scripting vulnerability in Creativethemes Blocksy
The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the Contact Info Block link parameter in all versions up to, and including, 2.0.77 due to insufficient input sanitization and output escaping.
network
low complexity
creativethemes CWE-79
5.4
5.4
2024-06-05 CVE-2024-5439 Cross-site Scripting vulnerability in Creativethemes Blocksy
The Blocksy theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the custom_url parameter in all versions up to, and including, 2.0.50 due to insufficient input sanitization and output escaping.
network
low complexity
creativethemes CWE-79
5.4
5.4