WordPress Page Builder with Image Map by AZEXO Plugin <= 1.27.133 is vulnerable to Cross Site Scripting (XSS)

Software Page Builder with Image Map by AZEXO Type Plugin Vulnerable versions = 1.27.133 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-3055 Patch priority Low CVSS severity Low 6.1 Developer Claim ownership PSID f4849bd1e963 Credits...

CVE-2023-3055

The Page Builder by AZEXO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.27.133. This is due to missing or incorrect nonce validation on the 'azhsave' function. This makes it possible for unauthenticated attackers to update the post content an...

CVE-2023-3055

CVE-2023-3055 affects the Page Builder by AZEXO plugin for WordPress (versions up to 1.27.133). Root cause: missing/incorrect nonce validation on azh_save, enabling Cross-Site Request Forgery. Impact: unauthenticated attackers could update post content and inject malicious JavaScript via forged r...