Skip to content
CozyThemes Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox
-
CVE-2026-109975
Medium 6.4
Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute
0.2%
-
CVE-2026-109978
Medium 6.4
Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'productRating.iconColor' Block Attribute
0.2%