Lucene search
+L

2 matches found

Positive Technologies
Positive Technologies
added 2025/12/12 12:0 a.m.15 views

PT-2025-50851

The App Landing Template Blocks for WPBakery Visual Composer Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'atvc video play' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied...

6.4CVSS4.9AI score0.00211EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2025/12/11 8:48 p.m.11 views

WordPress App Landing Template Blocks for WPBakery Page Builder plugin <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode Attributes vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin App Landing Template Blocks for WPBakery Visual Composer Page Builder versions = 2.0.2...

6.4CVSS5.4AI score0.00211EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder