medium6.5
CVE-2026-116400
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Button Block button-block allows Stored XSS.This…
Impact
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Button Block button-block allows Stored XSS.This issue affects Button Block: from n/a through 1.2.7.
Affected products
| Product | Affected versions |
|---|---|
| Button Block: From N/A | through 1.2.7. |
Versions were read from the advisory text. No structured product data has been published for this record yet.