CVE-2024-9274 Elastik Page Builder <= 0.27.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

The Elastik Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 0.27.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and...

CVE-2024-9274

The CVE CVE-2024-9274 affects Elastik Page Builder for WordPress, with Stored Cross-Site Scripting via SVG file uploads in all versions up to 0.27.4 due to insufficient input sanitization and output escaping. Exploitation requires Author-level access or higher, and injected scripts run when a use...

CVE-2024-9274 Elastik Page Builder <= 0.27.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

The Elastik Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 0.27.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and...

WordPress Elastik Page Builder plugin <= 0.27.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability

Authenticated Author+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by Francesco Carlucci in WordPress Plugin Elastik Page Builder versions = 0.27.4...

WordPress plugin Elastik Page Builder 跨站脚本漏洞

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. Broken Link Check is an invalid link checking plugin for WordPress, which supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the WordPress plugin Elast...

PT-2024-39532 · WordPress · Elastik Page Builder

Name of the Vulnerable Software and Affected Versions: Elastik Page Builder plugin for WordPress versions up to, and including, 0.27.4 Description: The issue is related to Stored Cross-Site Scripting via SVG File uploads due to insufficient input sanitization and output escaping. This allows...

FlatPress 跨站脚本漏洞

FlatPress is a Php-based blog builder without database support from the FlatPress community. A cross-site scripting vulnerability exists in FlatPress v1.3, which stems from the presence of a cross-site scripting vulnerability that allows remote attackers to execute arbitrary code by sending a...

WordPress Elastik Page Builder Plugin <= 0.27.4 is vulnerable to Cross Site Scripting (XSS)

Software Elastik Page Builder Type Plugin Vulnerable versions = 0.27.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9274 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID e7cb14e17099 Credits Francesco Carlucci...

RHSA-2023:2780 Red Hat Security Advisory: Image Builder security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2023:2204 Red Hat Security Advisory: Image Builder security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2022:7548 Red Hat Security Advisory: Image Builder security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2022:7950 Red Hat Security Advisory: Image Builder security, bug fix, and enhancement update

Bulletin has no description...

WordPress Enter Addons – Ultimate Template Builder for Elementor plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Enter Addons versions = 2.1.8...

WordPress Bold Page Builder plugin < 5.1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Robert DeVore Patchstack Alliance in WordPress Plugin Bold Page Builder versions 5.1.1...

WordPress XLTab – Accordions and Tabs for Elementor Page Builder plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin XLTab – Accordions and Tabs for Elementor Page Builder versions = 1.3...

WordPress Cost Calculator Builder plugin < 3.2.29 - Admin+ SQL Injection vulnerability

Admin+ SQL Injection vulnerability discovered by Kientt in WordPress Plugin Cost Calculator Builder versions 3.2.29...

CVE-2024-8379

The Cost Calculator Builder WordPress plugin before 3.2.29 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin...

CVE-2024-8379

The Cost Calculator Builder WordPress plugin before 3.2.29 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin...

CVE-2024-8379 Cost Calculator Builder < 3.2.29 - Admin+ SQL Injection

The Cost Calculator Builder WordPress plugin before 3.2.29 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin...

CVE-2024-8379 Cost Calculator Builder < 3.2.29 - Admin+ SQL Injection

The Cost Calculator Builder WordPress plugin before 3.2.29 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin...