cleantalk
Vulnerabilities and Security Researches

B Blocks – The ultimate block collection, CVE-2026-104400

CVE, Research URL

CVE-2026-104400

Published on
Oct 05, 2026
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Blocks b-blocks allows Stored XSS.This issue affects B Blocks: from n/a through 2.1.8.
Affected versions
max 2.1.9.
Status
vulnerable