Description
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeThemes Blocksy Companion plugin <= 1.8.67 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CreativeThemes | Blocksy Companion | ≤ 1.8.67 | — |
Medium · 5.5
CVE-2023-23898
EUVD-2023-27981GHSA-6w6v-rfwc-h24p
WordPress Blocksy Companion Plugin <= 1.8.67 is vulnerable to Cross Site Scripting (XSS)
Published Apr 6, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack