CVE-2020-28650

Summary: CVE-2020-28650 affects the WordPress WPBakery Page Builder (pre-6.4.1). The vulnerability arises because the plugin calls kses_remove_filters to disable WordPress XSS protections for the Author and Contributor roles, enabling cross-site scripting. Impact (as described): XSS that can be t...