Skip to content
Sign in
Not rated

CVE-2022-2041 The Brizy WordPress plugin before 2.4.2 does not sanitise and escape some element content, which could allow users…

Description

The Brizy WordPress plugin before 2.4.2 does not sanitise and escape some element content, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks

Affected products and versions

Product Affected versions Fixed in
Brizy – Page Builder 2.4 earliest → < 2.4.2 2.4.2

Other CVEs of Brizy – Page Builder

The 2 CVEs of Brizy – Page Builder →
CVE-2022-2040 The Brizy WordPress plugin before 2.4.2 does not sanitise and escape some element URL, which could allow users with a… Not rated
Track this CVE