Known vulnerabilities in the Cozy Blocks plugin
8 security advisories have been published for the Cozy Blocks plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Cozy Blocks - Broken Access Control (CVE-2026-19948) MEDIUM
- Cozy Blocks - Cross-Site Scripting (XSS) (CVE-2026-75019) MEDIUM
- Cozy Blocks - Cross-Site Scripting (XSS) (CVE-2026-15950) MEDIUM
- Cozy Blocks - Cross-Site Scripting (XSS) (CVE-2026-15393) MEDIUM
- Cozy Blocks - Cross-Site Scripting (XSS) (CVE-2026-15334) MEDIUM
- Cozy Blocks - Cross-Site Scripting (XSS) (CVE-2026-15333) MEDIUM
- Cozy Blocks - Cross-Site Scripting (XSS) (CVE-2024-50441) MEDIUM
- Cozy Blocks - Cross-Site Scripting (XSS) (CVE-2024-50502) MEDIUM