Justin Dodge Hotblocks — known CVE vulnerabilities

Every CVE whose affected-product data names Justin Dodge Hotblocks, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2012-5704 — CVSS 3.5 (low): The Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the "administer hotblocks" permission to…
• CVE-2012-5705 — CVSS 2.1 (low): Cross-site scripting (XSS) vulnerability in the settings page (admin/settings/hotblocks) in the Hotblocks module 6.x-1.x before 6.x-1.8 for…