Lucene search

K
patchstackKhalid YusufPATCHSTACK:02A0FE0B2464391D6BD670FF39DC5B92
HistoryMar 25, 2024 - 12:00 a.m.

WordPress Livemesh Addons for WPBakery Page Builder Plugin <= 3.7 is vulnerable to Cross Site Scripting (XSS)

2024-03-2500:00:00
Khalid Yusuf
patchstack.com
2
wordpress
livemesh addons
wpbakery
cross site scripting
injection
cve-2024-30183
low severity

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

AI Score

6.9

Confidence

High

Software

Livemesh Addons for WPBakery Page Builder

Type

Plugin

Vulnerable versions

<= 3.7

Fixed in

3.8

OWASP Top 10

A3: Injection

Classification

Cross Site Scripting (XSS)

CVE

CVE-2024-30183

Patch priority

Low

CVSS severity

Low (6.5)

Developer

Claim ownership

PSID

f0d0b4d75da7

Credits

Khalid Yusuf Khalid Yusuf

Required privilege

Contributor

Published

25 March, 2024

Remove and replace plugin Expand full details Have additional information or questions about this entry? Let us know.

Solution

This security issue has a low severity impact and is unlikely to be exploited.

Affected configurations

Vulners
Node
livemeshthemeswpbakery_page_builder_addonsRange3.7wordpress
VendorProductVersionCPE
livemeshthemeswpbakery_page_builder_addons*cpe:2.3:a:livemeshthemes:wpbakery_page_builder_addons:*:*:*:*:*:wordpress:*:*

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

AI Score

6.9

Confidence

High

Related for PATCHSTACK:02A0FE0B2464391D6BD670FF39DC5B92