PT-2024-15162 · WordPress · Colibri Page Builder

Name of the Vulnerable Software and Affected Versions: Colibri Page Builder plugin for WordPress versions up to, and including, 1.0.239 Description: The issue is related to Stored Cross-Site Scripting via the plugin's extend builder render js shortcode due to insufficient input sanitization and...

WordPress Colibri Page Builder Plugin < 1.0.241 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:extendthemes:colibripagebuilder"; if description...

WordPress Colibri Page Builder Plugin <= 1.0.239 is vulnerable to Cross Site Scripting (XSS)

Software Colibri Page Builder Type Plugin Vulnerable versions = 1.0.239 Fixed in 1.0.240 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6988 Patch priority Low CVSS severity Low 6.4 Developer Claim ownership PSID de0346984396 Credits Hung -mov Nguye...

Colibri Page Builder < 1.0.240 - Contributor+ Stored XSS

Description The plugin does not validate and escape some its extendbuilderrenderjs shortcode content before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

Colibri Page Builder < 1.0.248 - Contributor+ Stored XSS

Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2023-50833

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ExtendThemes Colibri Page Builder allows Stored XSS.This issue affects Colibri Page Builder: from n/a through 1.0.239...

CVE-2023-50833

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ExtendThemes Colibri Page Builder allows Stored XSS.This issue affects Colibri Page Builder: from n/a through 1.0.239...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ExtendThemes Colibri Page Builder allows Stored XSS.This issue affects Colibri Page Builder: from n/a through 1.0.239...

CVE-2023-50833

CVE-2023-50833 affects Colibri Page Builder (WordPress) via Stored Cross-Site Scripting (XSS) in shortcode processing. Vulnerable versions: Colibri Page Builder up to 1.0.239 (tests indicate patch/mitigation in 1.0.240+). Root cause per connected Red Hat/Wordfence entries points to improper neutr...

CVE-2023-50833 WordPress Colibri Page Builder Plugin <= 1.0.239 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ExtendThemes Colibri Page Builder allows Stored XSS.This issue affects Colibri Page Builder: from n/a through 1.0.239...

PT-2023-31664 · Extend Themes · Extendthemes Colibri Page Builder

Name of the Vulnerable Software and Affected Versions: ExtendThemes Colibri Page Builder versions 1.0.239 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can...

WordPress plugin Colibri Page Builder cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

WordPress Colibri Page Builder Plugin <= 1.0.246 is vulnerable to Cross Site Scripting (XSS)

Software Colibri Page Builder Type Plugin Vulnerable versions = 1.0.246 Fixed in 1.0.248 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50833 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1d11825976b2 Credits LVT-tholv2k Required privileg...

Franklin Electric Fueling Systems Colibri

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : Franklin Electric Fueling Systems Equipment : Colibri Vulnerability : Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could...

CVE-2023-5885

CVE-2023-5885 affects Franklin Electric Fueling Systems Colibri (discontinued Colibri product). The vulnerability is a Path Traversal (CWE-35) that allows a remote attacker to access files on the system, including files containing login credentials for other users. Affected scope: Colibri firmwar...

CVE-2023-5885 Franklin Electric Fueling Systems Colibri Path Traversal

The discontinued FFS Colibri product allows a remote user to access files on the system including files containing login credentials for other users...

Franklin Fueling System Colibri Path Traversal Vulnerability

Franklin Fueling System Colibri is a fuel system from Franklin Fueling System, Inc. in the United States. The system monitors fuel density and inventory levels. A security vulnerability exists in Franklin Fueling System Colibri that originates from allowing an attacker to access files on the...

PT-2023-32394 · Unknown · Ffs Colibri

Name of the Vulnerable Software and Affected Versions: FFS Colibri affected versions not specified Description: The issue allows a remote user to access files on the system, including files that contain login credentials for other users. Recommendations: At the moment, there is no information abo...

VulnCheck KEV: CVE-2021-46417

Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privileges in Franklin Fueling Systems Colibri Controller Module 1.8.19.8580...

WordPress Colibri Page Builder Plugin < 1.0.229 SQLi Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:extendthemes:colibripagebuilder"; if description...