Project: 
Block Attributes
Project machine name: 
block_attributes
Date: 
2026-October-21
Security risk: 
Moderately critical 13 ∕ 25 AC:Basic/A:Admin/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: 
Cross site Scripting
Affected versions: 
<2.1.0
CVE IDs: 
CVE-2026-114534
Description: 

This module allows you to define custom attributes for a block. You can specify an attribute name to be added to the block in a predefined format.

The module does not sufficiently sanitize attributes against cross site scripting.

This issue is mitigated by the fact that the attacker must have the administer blocks permission.

Solution: 

Install the latest version:

Reported By: 
Fixed By: 
Coordinated By: