Unknown Nexter Blocks

• CVE-2026-17011 Low 3.8 Nexter Blocks < 5.0.2 - Contributor+ Stored CSS Injection 0.2%
• CVE-2025-15678 Medium 6.1 Nexter Blocks < 5.0.2 - Author+ Stored XSS via SVG Upload 0.3%