SiteOrigin Widgets Bundle < 1.58.2 - Contributor+ Stored XSS

2024-01-3100:00:00

wpscan.com

siteorigin widgets bundle

stored xss

contributor access

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.9%

JSON

Description The plugin is vulnerable to Stored Cross-Site Scripting via the code editor due to insufficient input sanitization and output escaping, allowing authenticated attackers, with contributor access or higher, to perform Stored XSS attacks

CPENameOperatorVersion
eq1.58.2

CPE	Name	Operator	Version
		eq	1.58.2

References

www.wordfence.com/threat-intel/vulnerabilities/id/6f7c164f-2f78-4857-94b9-077c2dea13df