2 matches found
PT-2025-50851
The App Landing Template Blocks for WPBakery Visual Composer Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'atvc video play' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied...
6.4CVSS4.9AI score0.00211EPSS
SaveExploits0References4
WordPress App Landing Template Blocks for WPBakery Page Builder plugin <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode Attributes vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin App Landing Template Blocks for WPBakery Visual Composer Page Builder versions = 2.0.2...
6.4CVSS5.4AI score0.00211EPSS
SaveExploits0References1Affected Software1
20