CVE-2026-114534

This module allows you to define custom attributes for a block. You can specify an attribute name to be added to the block in a predefined format.

The module does not sufficiently sanitize attributes against cross site scripting.

This issue is mitigated by the fact that the attacker must have the administer blocks permission.