nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-40963 CVE-2022-40963
MEDIUM
WordPress WP Page Builder plugin <= 1.2.6 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities
Record summary
CVE-2022-40963 has a selected CVSS score of 4.8 (medium).
Description
Multiple Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerabilities in WP Page Builder plugin <= 1.2.6 on WordPress.
Description source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
WP Page Builder (WordPress plugin)Browse Themeum / WP Page Builder (WordPress plugin) | CVE List | <= 1.2.6 to ≤ 1.2.6 | affected |
References
3patchstack.com
https://patchstack.com/database/vulnerability/wp-pagebuilder/wordpress-wp-page-builder-plugin-1-2-6-multiple-auth-stored-cross-site-scripting-xss-vulnerabilities?_s_id=cve wordpress.org
https://wordpress.org/plugins/wp-pagebuilder