5.9
Moyenne
CVE-2026-24620 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps Landing Page Builder page-builder-add allows Stored XSS.This issue affects Landing Page Builder: from n/a through <= 1.5.3.4.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Landing Page Builder 1.5 | premières → 1.5.3.4 | Pas de correctif indiqué |
Autres CVE de Landing Page Builder
Les 6 CVE de Landing Page Builder →
CVE-2026-57337
Unauthenticated Cross Site Scripting (XSS) in Landing Page Builder <= 1.5.3.5 versions
7.1
Élevée
CVE-2024-43345
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PluginOps Landing Page…
7.5
Élevée
CVE-2024-34752
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PluginOps…
7.1
Élevée
CVE-2024-30452
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps…
5.9
Moyenne