Brizy < 2.3.12 - Authenticated Stored Cross-Site Scripting

🗓️ 13 Oct 2021 00:00:00Reported by Ramuel GallType

Brizy plugin < 2.3.12 - Authenticated Stored Cross-Site Scripting allows lower-privileged users to add JavaScript to page conten

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2021-38344 Brizy <= 2.3.11 Authenticated Stored Cross-Site Scripting	14 Oct 202115:56	–	cvelist
NVD	CVE-2021-38344	14 Oct 202116:15	–	nvd
Patchstack	WordPress Brizy – Page Builder plugin <= 2.3.11 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability	13 Oct 202100:00	–	patchstack
CVE	CVE-2021-38344	14 Oct 202116:15	–	cve
Prion	Design/Logic Flaw	14 Oct 202116:15	–	prion
Wordfence Blog	Multiple Vulnerabilities in Brizy Page Builder Plugin Allow Site Takeover	13 Oct 202114:00	–	wordfence
ThreatPost	Brizy WordPress Plugin Exploit Chains Allow Full Site Takeovers	13 Oct 202116:05	–	threatpost

Vulners

Node

-brizyRange<2.3.12

Source	Link
wordfence	www.wordfence.com/blog/2021/10/multiple-vulnerabilities-in-brizy-page-builder-plugin-allow-site-takeover/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Oct 2021 00:00Current

2.3Low risk

Vulners AI Score2.3

EPSS0.001