edge22 GenerateBlocks vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20253
3. 20263

Newest CVEs

• CVE-2026-13458

  GenerateBlocks <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dynamic Tag Injection in HTML Attributes

  edge22 · GenerateBlocks

  Medium6.4
• CVE-2026-9756

  GenerateBlocks <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Headline Block 'linkMetaFieldType' Dynamic Link Attribute

  edge22 · GenerateBlocks

  Medium6.4
• CVE-2026-3454

  GenerateBlocks <= 2.2.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via Dynamic Tag Replacements

  edge22 · GenerateBlocks

  Medium6.5
• CVE-2025-12512

  GenerateBlocks <= 2.1.2 - Authenticated (Contributor+) Information Exposure via Metadata

  edge22 · GenerateBlocks

  Medium4.3
• CVE-2025-11879

  GenerateBlocks <= 2.1.1 - Improper Authorization to Authenticated (Contributor+) Arbitrary Options Disclosure

  edge22 · GenerateBlocks

  Medium6.5
• CVE-2024-13546

  GenerateBlocks <= 1.9.1 - Authenticated (Contributor+) Sensitive Information Exposure via 'get_image_description'

  edge22 · GenerateBlocks

  Medium4.3
• CVE-2024-1452

  GenerateBlocks <= 1.8.2 - Sensitive Information Exposure

  edge22 · GenerateBlocks

  Medium4.3