📋 الوصف الكامل

A vulnerability was found in creativethemeshq Blocksy Companion Plugin up to 2.1.51 on WordPress and classified as problematic. This affects an unknown function of the component Block Attribute. The manipulation of the argument tagName results in cross site scripting. This vulnerability was named CVE-2026-18488. The attack may be performed from remote. There is no available exploit.