Lucene search

PatchstackCVE-2024-43151

HistoryAug 12, 2024 - 10:15 p.m.

CVE-2024-43151

2024-08-1222:15:09

CWE-79

Patchstack

web.nvd.nist.gov

cve-2024-43151

cross-site scripting

stored xss

brainstorm force

ultimate addons

beaver builder

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

EPSS

Percentile

9.5%

JSON

Improper Neutralization of Input During Web Page Generation (XSS or ‘Cross-site Scripting’) vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder – Lite allows Stored XSS.This issue affects Ultimate Addons for Beaver Builder – Lite: from n/a through 1.5.9.

Affected configurations

Vulners

Node

brainstorm_forceultimate_addons_for_beaver_builder_–_liteRange≤1.5.9

VendorProductVersionCPE
brainstorm_forceultimate_addons_for_beaver_builder_–_lite*cpe:2.3:a:brainstorm_force:ultimate_addons_for_beaver_builder_–_lite:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
brainstorm_force	ultimate_addons_for_beaver_builder_–_lite	*	cpe:2.3:a:brainstorm_force:ultimate_addons_for_beaver_builder_–_lite::::::::

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "ultimate-addons-for-beaver-builder-lite",
    "product": "Ultimate Addons for Beaver Builder – Lite",
    "vendor": "Brainstorm Force",
    "versions": [
      {
        "changes": [
          {
            "at": "1.5.10",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.5.9",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/ultimate-addons-for-beaver-builder-lite/wordpress-ultimate-addons-for-beaver-builder-lite-plugin-1-5-9-cross-site-scripting-xss-vulnerability?_s_id=cve