CVE-2025-47500: WordPress Stackable plugin <= 3.19.5 - Cross Site Scripting (XSS) vulnerabi

WordPress Stackable plugin <= 3.19.5 - Cross Site Scripting (XSS) vulnerability

Status

Published

2026-01-22

Updated

2026-04-28

Assigning organization

Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Benjamin Intal Stackable stackable-ultimate-gutenberg-blocks allows Stored XSS.This issue affects Stackable: from n/a through <= 3.19.5.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Benjamin Intal Stackable

Default version status: unaffected

0 to ≤ 3.19.5affected

References

https://patchstack.com/database/Wordpress/Plugin/stackable-ultimate-gutenberg-blocks/vulnerability/wordpress-stackable-plugin-3-19-5-cross-site-scripting-xss-vulnerability?_s_id=cve ↗