5.9
Medium
CVE-2025-48277 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stylemix Cost…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stylemix Cost Calculator Builder cost-calculator-builder allows Stored XSS.This issue affects Cost Calculator Builder: from n/a through <= 3.2.74.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cost Calculator Builder 3.2 | earliest → 3.2.74 | No fix stated |
Other CVEs of Cost Calculator Builder
The 13 CVEs of Cost Calculator Builder →
CVE-2026-7753
The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized access of sensitive data due to a missing…
6.5
Medium
CVE-2026-10865
The Cost Calculator Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up…
5.3
Medium
CVE-2025-14755
The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Price Manipulation and Insecure Direct…
5.3
Medium
CVE-2025-14757
The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Payment Status Bypass in all…
5.3
Medium