CVE-2024-1164

The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's contact form widget error message and redirect URL in all versions up to, and including, 2.4.43 due to insufficient input sanitization and output escaping on user supplied error messages...

CVE-2024-1164

CVE-2024-1164 (Brizy – Page Builder for WordPress) stores cross-site scripting via the plugin’s form functionality. Connected sources confirm Brizy versions up to 2.4.43 are affected, with the vulnerability caused by insufficient input sanitization and output escaping on user-supplied error messa...