CVE-2023-3051 Page Builder by AZEXO <= 1.27.133 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Page Builder by AZEXO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'azhpost' shortcode in versions up to, and including, 1.27.133 due to insufficient input sanitization and output escaping. This makes it possible for contributor-level attackers to inject arbitrary web...

CVE-2023-3051

CVE-2023-3051 concerns the WordPress plugin “Page Builder by AZEXO” (AZEXO Page Builder). The vulnerability is a stored XSS via the shortcode attribute shown as ‘azh_post’ in versions up to and including 1.27.133, caused by insufficient input sanitization and inadequate output escaping. The impac...