OCTOBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-103354

HIGH · CVSS 7.1 EPSS 0.15%

Source: NVD + CISA KEV + EPSS · Published 2026-10-04 · Last synced 2026-10-07

CyberRota Analysis

AI-Generated

A stored cross-site scripting (XSS) vulnerability exists in the Gutenberg Blocks by Kadence Blocks, affecting versions up to 3.7.11.1. This flaw allows attackers to inject malicious scripts into web pages, potentially compromising user data and session integrity. Organizations utilizing these affected versions should prioritize remediation to protect against potential exploitation.

CVE
CVE-2026-103354
Severity
HIGH
CVSS
7.1
EPSS
0.15%

Original NVD Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allows Stored XSS.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through 3.7.11.1.