Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2026-41554

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bricks Builder allows Reflected XSS. This issue affects Bricks Builder: from n/a through 1.9.2 to 2.2.

VectorNETWORK

PublishedMay 07, 2026, 14:16

Published Byaudit@patchstack.com

Base Score

Score7.1

Affected Versions

No affected versions found.

References

https://patchstack.com/database/wordpress/theme/bricks/vulnerability/wordpress-bricks-builder-theme-1-9-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve

Weakness Type

CWE-79

CVSS Metrics

Base Score

7.1

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK