Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2025/03/26 2:23 a.m.18 views

CVE-2025-2573 Amazing service box Addons For WPBakery Page Builder <= 2.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

The Amazing service box Addons For WPBakery Page Builder formerly Visual Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible f...

6.4CVSS0.0028EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2025/03/25 6:56 p.m.9 views

WordPress Amazing service box Addons For WPBakery Page Builder plugin <= 2.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability

Authenticated Author+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by Avraham Shemesh in WordPress Plugin Amazing service box Addons For WPBakery Page Builder versions = 2.0.0...

6.4CVSS5.5AI score0.0028EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder