CVE-2026-15950

Name of the Vulnerable Software and Affected Versions Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates versions prior to 2.2.12

Description Insufficient input sanitization and output escaping allow authenticated attackers with contributor-level access and above to perform Stored Cross-Site Scripting. This is achieved by injecting arbitrary web scripts through the layoutCircle.alignment block attribute, which execute when a user visits the affected page.

Recommendations Update to a version newer than 2.2.11.