Aller au contenu
Se connecter
4.8 Moyenne

CVE-2022-3830 The WP Page Builder WordPress plugin through 1.2.8 does not sanitise and escape some of its settings, which could…

Description

The WP Page Builder WordPress plugin through 1.2.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

Produits et versions touchés

Produit Versions touchées Corrigé en
WP Page Builder 1.2 premières → 1.2.8 Pas de correctif indiqué

Autres CVE de WP Page Builder

Les 3 CVE de WP Page Builder →
CVE-2021-24207 By default, the WP Page Builder WordPress plugin before 1.2.4 allows subscriber-level users to edit and make changes… Non notée CVE-2021-24208 The editor of the WP Page Builder WordPress plugin before 1.2.4 allows lower-privileged users to insert unfiltered HTML,… Non notée
Suivre cette CVE