CVE-2026-78290

The vulnerability affects Magazine Blocks versions up to 1.8.6, allowing for Cross-Site Scripting (XSS) attacks due to improper input validation. This could enable attackers to inject malicious scripts, potentially compromising user data and session integrity. Organizations using these versions should prioritize remediation to protect against potential exploitation.