Rootblox
Monthly
Stored cross-site scripting in the CozyThemes Rootblox WordPress plugin through version 1.0.7 allows an authenticated low-privileged user to persist malicious input that executes in another user's browser when that victim views the affected page. The CVSS 3.1 score is 6.5 with PR:L and UI:R, so risk is concentrated on sites granting low-trust accounts content-submission access; no public exploit was identified at time of analysis.
Stored cross-site scripting in the CozyThemes Rootblox WordPress plugin through version 1.0.7 allows an authenticated low-privileged user to persist malicious input that executes in another user's browser when that victim views the affected page. The CVSS 3.1 score is 6.5 with PR:L and UI:R, so risk is concentrated on sites granting low-trust accounts content-submission access; no public exploit was identified at time of analysis.