1 matches found
CVE-2023-3051: Improper Neutralization of Input During Web Page Generation
The Page Builder by AZEXO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'azhpost' shortcode in versions up to, and including, 1.27.133 due to insufficient input sanitization and output escaping. This makes it possible for contributor-level attackers to inject arbitrary web...
6.4CVSS6AI score0.00476EPSS
SaveExploits0References3
20