Sploit.io - Search

Product: B Blocks, version: >= n/a, <= 2.0.5

CVE-2025-54708

Severity: MEDIUM

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Blocks allows DOM-Based XSS. This issue affects B Blocks: from n/a through 2.0.5.

CVSS Score: 6.5

Affected Products:

bPlugins B Blocks - Versions: n/a

References:

https://patchstack.com/database/wordpress/plugin/b-blocks/vulnerability/wordpress-b-blocks-plugin-plugin-2-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve