CVE-2021-24208

The editor of the WP Page Builder WordPress plugin before 1.2.4 allows lower-privileged users to insert unfiltered HTML, including JavaScript, into pages via the “Raw HTML” widget and the “Custom HTML” widgets though the custom HTML widget requires sending a crafted request - it appears that this...

CVE-2021-24208

Summary: CVE-2021-24208 affects WP Page Builder WordPress plugin (versions before 1.2.4). The issue is stored cross-site scripting (XSS) via the editor widgets in the page builder. Lower-privileged users can insert unfiltered HTML, including JavaScript, into pages through the Raw HTML and Custom ...