Sep 25, 2026
Nexter Blocks - FREE — about 2 months ago
Security : Fixed Author+ Stored XSS via SVG upload (SVGs now restricted to trusted users and sanitized). Reported by Bob Matyas.
Security : Fixed Contributor+ Stored CSS Injection in the global CSS endpoint (now admin-only). Reported by Vaibhav Narkhede.
Fix : Minor Bugs and Improvements.