cleantalk
Vulnerabilities and Security Researches

Cozy Blocks – Page Builder Blocks for FSE and Gutenberg Editor, Gutenberg Blocks, WooCommerce Blocks, Post Blocks, Slider, CVE-2025-30838

CVE, Research URL

CVE-2025-30838

Published on
Mar 27, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes Cozy Blocks allows Stored XSS. This issue affects Cozy Blocks: from n/a through 2.1.6.
Affected versions
Min -, max 2.1.7.
Status
vulnerable