CVE-2022-3830

🗓️ 05 Dec 2022 17:10:15Reported by [email protected]Type

The WP Page Builder plugin through 1.2.8 allows Stored XSS attacks by high privilege users, bypassing unfiltered_html capability disallowance in multisite setup

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2022-3830 WP Page Builder <= 1.2.8 - Admin+ Stored Cross-Site	5 Dec 202216:50	–	cvelist
Patchstack	WordPress WP Page Builder plugin <= 1.2.8 - Auth. Stored Cross-Site Scripting (XSS) vulnerability	10 Nov 202200:00	–	patchstack
WPVulnDB	WP Page Builder <= 1.2.8 - Admin+ Stored Cross-Site	10 Nov 202200:00	–	wpvulndb
Prion	Cross site scripting	5 Dec 202217:15	–	prion
CVE	CVE-2022-3830	5 Dec 202217:15	–	cve
wpexploit	WP Page Builder <= 1.2.8 - Admin+ Stored Cross-Site	10 Nov 202200:00	–	wpexploit

Nvd

Node

themeum wp_page_builderRange≤1.2.8wordpress

Source	Link
wpscan	www.wpscan.com/vulnerability/98b2321d-fb66-4e02-9906-63af7b08d647

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Dec 2022 17:15Current

CVSS34.8

EPSS0.00968