Cross site scripting

ssr-pages is an HTML page builder for the purpose of server-side rendering SSR. In versions prior to 0.1.5, a cross site scripting XSS issue can occur when providing untrusted input to the redirect.link property as an argument to the buildMessagePageOptions function. While there is no known...

CVE-2022-24718 Path Traversal in ssr-pages

ssr-pages is an HTML page builder for the purpose of server-side rendering SSR. In versions prior to 0.1.4, a path traversal issue can occur when providing untrusted input to the svg property as an argument to the buildMessagePageOptions function. While there is no known workaround at this time,...

CVE-2022-24718

CVE-2022-24718 affects the ssr-pages HTML page builder. A path traversal vulnerability exists when untrusted input is provided to the svg property as an argument to build(MessagePageOptions). The issue is present in versions prior to 0.1.4. A patch is available in version 0.1.4 (upgrade to 0.1.4 ...

CVE-2022-24717

CVE-2022-24717 affects ssr-pages (HTML SSR tool). The vulnerability is a Cross-Site Scripting (XSS) issue triggered by untrusted input passed to redirect.link in the build(MessagePageOptions) function, in versions prior to 0.1.5. A patch exists in version 0.1.5. Connected documents confirm the is...

CVE-2022-24717 Cross Site Scripting (XSS) in ssr-pages

ssr-pages is an HTML page builder for the purpose of server-side rendering SSR. In versions prior to 0.1.5, a cross site scripting XSS issue can occur when providing untrusted input to the redirect.link property as an argument to the buildMessagePageOptions function. While there is no known...

CVE-2022-24717 Cross Site Scripting (XSS) in ssr-pages

ssr-pages is an HTML page builder for the purpose of server-side rendering SSR. In versions prior to 0.1.5, a cross site scripting XSS issue can occur when providing untrusted input to the redirect.link property as an argument to the buildMessagePageOptions function. While there is no known...

WordPress WPBITS Addons For Elementor Page Builder plugin <= 1.3.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WPBITS Addons For Elementor Page Builder plugin versions = 1.3.1. Solution Update the WordPress WPBITS Addons For Elementor Page Builder plugin to the latest available version at least 1.3.2...

WordPress Livemesh Addons for WPBakery Page Builder plugin <= 2.9.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Livemesh Addons for WPBakery Page Builder plugin versions = 2.9.1. Solution Update the WordPress Livemesh Addons for WPBakery Page Builder plugin to the latest available version at least 2.9.2...

WordPress Modern Addons for Elementor Page Builder plugin <= 1.1.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Modern Addons for Elementor Page Builder plugin versions = 1.1.2. Solution Update the WordPress Modern Addons for Elementor Page Builder plugin to the latest available version at least 1.2.0...

WordPress Greenshift – animation and page builder blocks plugin < 1.1.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Greenshift – animation and page builder blocks plugin versions 1.1.4. Solution Update the WordPress Greenshift – animation and page builder blocks plugin to the latest available version at least 1.1.4...

WordPress Page Builder Sandwich – Front-End Page Builder plugin <= 4.5.5 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Page Builder Sandwich – Front-End Page Builder plugin versions = 4.5.5. Solution Update the WordPress Page Builder Sandwich – Front-End Page Builder plugin to the latest available version at least 4.5.6...

WordPress Livemesh Addons for WPBakery Page Builder plugin <= 2.9.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Livemesh Addons for WPBakery Page Builder plugin versions = 2.9.1. Solution Update the WordPress Livemesh Addons for WPBakery Page Builder plugin to the latest available version at least 2.9.2...

WordPress Page Builder Gutenberg Blocks – Kioken Blocks plugin <= 1.3.9 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Page Builder Gutenberg Blocks – Kioken Blocks plugin versions = 1.3.9. Solution No patched version available...

WordPress Page Builder for Gutenberg – StarterBlocks plugin <= 1.0.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Page Builder for Gutenberg – StarterBlocks plugin versions = 1.0.6. Solution No patched version available...

WordPress Page Builder for Gutenberg – StarterBlocks plugin <= 1.0.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Page Builder for Gutenberg – StarterBlocks plugin versions = 1.0.6. Solution No patched version available...

WordPress Modern Addons for Elementor Page Builder plugin <= 1.1.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Modern Addons for Elementor Page Builder plugin versions = 1.1.2. Solution Update the WordPress Modern Addons for Elementor Page Builder plugin to the latest available version at least 1.2.0...

WordPress Page Builder Gutenberg Blocks – Kioken Blocks plugin <= 1.3.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Page Builder Gutenberg Blocks – Kioken Blocks plugin versions = 1.3.9. Solution No patched version available...

WordPress Stackable – Page Builder Gutenberg Blocks plugin < 3.1.5 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Stackable – Page Builder Gutenberg Blocks plugin versions 3.1.5. Solution Update the WordPress Stackable – Page Builder Gutenberg Blocks plugin to the latest available version at least 3.1.5...

WordPress Stackable – Page Builder Gutenberg Blocks plugin < 3.1.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Stackable – Page Builder Gutenberg Blocks plugin versions 3.1.5. Solution Update the WordPress Stackable – Page Builder Gutenberg Blocks plugin to the latest available version at least 3.1.5...

WordPress Greenshift – animation and page builder blocks plugin < 1.1.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Greenshift – animation and page builder blocks plugin versions 1.1.4. Solution Update the WordPress Greenshift – animation and page builder blocks plugin to the latest available version at least 1.1.4...