Lucene search
Lana CodesWPEX-ID:99389641-AD1E-45C1-A42F-2A010EE22D76HistoryApr 17, 2023 - 12:00 a.m.
Mega Addons For WPBakery Page Builder < 4.3.0 - Contributor+ Stored XSS
2023-04-1700:00:00
Lana Codes
77
mega addons
wpbakery page builder
stored xss
EPSS
0.001
Percentile
23.5%
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
[vc_testimonial link='target:" onmouseover="alert(1)"' name='XSS' prof='XSS! MOUSE OVER HERE!']Related
prion
prion
Cross site scripting
2023-05-08 14:15:00
nvd
nvd
CVE-2023-0268
2023-05-08 14:15:11
cvelist
cvelist
wpvulndb
wpvulndb
Mega Addons For WPBakery Page Builder < 4.3.0 - Contributor+ Stored XSS
2023-04-17 00:00:00
cve
cve
CVE-2023-0268
2023-05-08 14:15:11
wordfence
wordfence