- Description
 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Team Section Block allows Stored XSS. This issue affects Team Section Block: from n/a through 1.0.9.
 - Source
 - audit@patchstack.com
 - NVD status
 - Received
 
CVSS 3.1
- Type
 - Secondary
 - Base score
 - 6.5
 - Impact score
 - 3.7
 - Exploitability score
 - 2.3
 - Vector string
 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
 - Severity
 - MEDIUM
 
- audit@patchstack.com
 - CWE-79
 
- Hype score
 - Not currently trending
 
CVE-2025-26949 Improper Neutralization of Input During Web Page Generation ('Cro... https://t.co/6Zz8oI9aTS Vulnerability Alert Subscriptions: https://t.co/hrQhy5uz4x
@VulmonFeeds
25 Feb 2025
5 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-26949 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Team Section Block allows Stored XSS. This issue affect… https://t.co/ICwM4r7t8f
@CVEnew
25 Feb 2025
160 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes