CVE-2020-15299: Improper Neutralization of Input During Web Page Generation

A reflected Cross-Site Scripting XSS Vulnerability in the KingComposer plugin through 2.9.4 for WordPress allows remote attackers to trick a victim into submitting an installonlinepreset AJAX request containing base64-encoded JavaScript in the kc-online-preset-data POST parameter that is executed...

PT-2020-14340

Name of the Vulnerable Software and Affected Versions KingComposer plugin versions through 2.9.4 for WordPress Description A reflected Cross-Site Scripting issue allows remote attackers to trick a victim into submitting an install online preset AJAX request containing base64-encoded JavaScript,...