TI-2026-05480 CVE-2026-6247 · GHSA-54wj-7676-6jj4
Cross-site scripting in tkc49 scratchblocks for WP
Priority LOW 28
The scratchblocks for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'element' attribute of the 'scratchblocks' shortcode in all versions up to, and including, 1.0.1 due to insufficient inpu…