Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pootlepress Pootle Pagebuilder – WordPress Page builder allows Stored XSS.This issue affects Pootle Pagebuilder – WordPress Page builder: from n/a through...
6.5CVSS
6.6AI Score
0.0004EPSS
6.1CVSS
6AI Score
0.001EPSS
The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assets_url parameter in assets/dialog.php, exploitable via...
5.4CVSS
5.3AI Score
0.001EPSS