CVE-2025-9565 | Blocksy Companion Plugin up to 2.1.10 on WordPress Shortcode blocksy_newsletter_subscribe cross site scripting

A vulnerability has been found in Blocksy Companion Plugin up to 2.1.10 on WordPress and classified as problematic. This affects the function blocksy_newsletter_subscribe of the component Shortcode Handler. Performing manipulation results in cross site scripting.

This vulnerability is cataloged as CVE-2025-9565. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More