CVE-2024-43155: Pickplugins Comboblocks

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PickPlugins ComboBlocks allows Stored XSS.This issue affects ComboBlocks: from n/a through 2.2.86.

Affected products

• Pickplugins Comboblocks: up to and including 2.2.86

Published 2024-08-12. Last modified 2026-06-17.