CVE-2026-116400

Published 26 October 2026 · tracked since 27 October 2026

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Button Block button-block allows Stored XSS.This issue affects Button Block: from n/a through 1.2.7.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-72752 MEDIUM 6.5
• CVE-2026-50095 MEDIUM 6.1
• CVE-2026-116398 MEDIUM 6.5
• CVE-2026-115922 MEDIUM 6.2
• CVE-2026-115923 MEDIUM 6.5
• CVE-2026-115966 MEDIUM 6.5
• CVE-2026-115918 MEDIUM 6.5
• CVE-2026-115919 MEDIUM 6.2
• CVE-2026-115920 MEDIUM 6.2
• CVE-2026-115921 MEDIUM 6.2

→ Open the live CVE board · all tools