Skip to content
Sign in
Not rated

CVE-2022-2040 The Brizy WordPress plugin before 2.4.2 does not sanitise and escape some element URL, which could allow users with a…

Description

The Brizy WordPress plugin before 2.4.2 does not sanitise and escape some element URL, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks

Affected products and versions

Product Affected versions Fixed in
Brizy – Page Builder 2.4 earliest → < 2.4.2 2.4.2

Other CVEs of Brizy – Page Builder

The 2 CVEs of Brizy – Page Builder →
CVE-2022-2041 The Brizy WordPress plugin before 2.4.2 does not sanitise and escape some element content, which could allow users… Not rated
Track this CVE