PT-2025-46816 · Unknown · Qode Qi Blocks
CVE-2025-64383
·
Publicado
2025-11-13
·
Atualizado
2025-11-13
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Qode Qi Blocks versions through 1.4.3
Description
The software contains a flaw due to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting (XSS). This means that malicious scripts can be stored on the server and executed by other users when they view the affected web page. The vulnerability affects the
qi-blocks component.Recommendations
Update Qode Qi Blocks to a version later than 1.4.3.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Qode Qi Blocks