Lucene search

K
patchstackNgo Van Thien (Alliance project)PATCHSTACK:3C4732ED3B59DEEA68D4E0FAB618D037
HistoryOct 21, 2022 - 12:00 a.m.

WordPress WP Page Builder plugin <= 1.2.6 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities

2022-10-2100:00:00
Ngo Van Thien (Alliance project)
patchstack.com
11
wordpress
wp page builder
cross-site scripting
authenticated
update

0.001 Low

EPSS

Percentile

19.5%

Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities were discovered by Ngo Van Thien (Patchstack Alliance) in the WordPress WP Page Builder plugin (versions <= 1.2.6).

Solution

           Update the WordPress WP Page Builder plugin to the latest available version (at least 1.2.7).
CPENameOperatorVersion
wp page builderle1.2.6

0.001 Low

EPSS

Percentile

19.5%

Related for PATCHSTACK:3C4732ED3B59DEEA68D4E0FAB618D037