4 matches found
CVE-2022-3830
The CVE-2022-3830 issue affects WP Page Builder
CVE-2022-40963
CVE-2022-40963 concerns the WordPress plugin WP Page Builder (versions ≤ 1.2.6). The vulnerability is a Stored XSS in which parameters are not properly sanitized/escaped, enabling authenticated users with Author+ privileges to inject scripts. Impact is cross-site scripting within WordPress pages ...
CVE-2021-24207
CVE-2021-24207 affects the WordPress WP Page Builder plugin (versions
CVE-2021-24208
Summary: CVE-2021-24208 affects WP Page Builder WordPress plugin (versions before 1.2.4). The issue is stored cross-site scripting (XSS) via the editor widgets in the page builder. Lower-privileged users can insert unfiltered HTML, including JavaScript, into pages through the Raw HTML and Custom ...