CVE-2024-12239 PowerPack Lite for Beaver Builder <= 1.3.0.5 - Reflected Cross-Site Scripting via Navigate Parameter

🗓️ 17 Dec 2024 01:15:45Reported by WordfenceType

Vulnerability in PowerPack Lite for Beaver Builder allows cross-site scripting via navigate parameter.

Reporter	Title	Published	Views	Family All 4
CVE	CVE-2024-12239	17 Dec 202403:15	–	cve
Cvelist	CVE-2024-12239 PowerPack Lite for Beaver Builder <= 1.3.0.5 - Reflected Cross-Site Scripting via Navigate Parameter	17 Dec 202401:45	–	cvelist
NVD	CVE-2024-12239	17 Dec 202403:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 16, 2024 to January 5, 2025)	9 Jan 202514:35	–	wordfence

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/powerpack-addon-for-beaver-builder/trunk/includes/admin-settings-templates.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/5138ed4c-3e9c-45da-917e-e8d8396a62f1

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 Dec 2024 01:45Current

6.5Medium risk

Vulners AI Score6.5

CVSS36.1

EPSS0.001

SSVC

CWE-79