Known vulnerabilities in Block Attributes
Vendor:
DYdave
Software:
Block Attributes
Software CPE:
cpe:2.3:a:dydave:block_attributes:*:*:*:*:*:drupal:*:*
Website:
https://www.drupal.org/u/dydave
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU157094 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-114534 |
CWE-79 | Low | 2.1.0 | 22.10.2026 |
SB20261022353 |
||
| #VU113366 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-7715 |
CWE-79 | Low | 1.1.0, 2.0.1 | 29.07.2025 |
SB2025072910 |