What’s Vulnerable › Products

edge22 GenerateBlocks vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your edge22 GenerateBlocks version is affected

Latest edge22 GenerateBlocks vulnerabilities

• CVE-2026-13458 — GenerateBlocks <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dynamic Tag Injection in HTML Attributes (CVSS 6.4)
• CVE-2026-9756 — GenerateBlocks <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Headline Block 'linkMetaFieldType' Dynamic Link Attribute (CVSS 6.4)
• CVE-2026-3454 — GenerateBlocks <= 2.2.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via Dynamic Tag Replacements (CVSS 6.5)
• CVE-2025-12512 — GenerateBlocks <= 2.1.2 - Authenticated (Contributor+) Information Exposure via Metadata (CVSS 4.3)
• CVE-2025-11879 — GenerateBlocks <= 2.1.1 - Improper Authorization to Authenticated (Contributor+) Arbitrary Options Disclosure (CVSS 6.5)
• CVE-2024-13546 — GenerateBlocks <= 1.9.1 - Authenticated (Contributor+) Sensitive Information Exposure via 'get_image_description' (CVSS 4.3)
• CVE-2024-1452 — GenerateBlocks <= 1.8.2 - Sensitive Information Exposure (CVSS 4.3)