CVE-2022-40963

CVE-2022-40963 concerns the WordPress plugin WP Page Builder (versions ≤ 1.2.6). The vulnerability is a Stored XSS in which parameters are not properly sanitized/escaped, enabling authenticated users with Author+ privileges to inject scripts. Impact is cross-site scripting within WordPress pages ...

CVE-2021-24207

CVE-2021-24207 affects the WordPress WP Page Builder plugin (versions

CVE-2021-24208

Summary: CVE-2021-24208 affects WP Page Builder WordPress plugin (versions before 1.2.4). The issue is stored cross-site scripting (XSS) via the editor widgets in the page builder. Lower-privileged users can insert unfiltered HTML, including JavaScript, into pages through the Raw HTML and Custom ...