WordPress Plugin Vulnerabilities

Page Builder by SiteOrigin 2.0.3 - Reflected XSS

Description

The Page Builder by SiteOrigin WordPress plugin was affected by a Reflected XSS security vulnerability.

Affects Plugins

Plugin icon
siteorigin-panels
Fixed in 2.0.5

References

URL
https://security.szurek.pl/page-builder-by-siteorigin-203-reflected-xss.html

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
f0c92465-96cb-4497-8f00-9bee6acce78a

Timeline

Publicly Published
2015-01-12 (about 11 years ago)
Added
2015-06-08 (about 10 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2026-03-16
Title
Flexmls® IDX Plugin < 3.15.10 - Reflected Cross-Site Scripting
Published
2025-02-21
Title
Pago por Redsys < 1.0.13 - Reflected Cross-Site Scripting
Published
2023-06-02
Title
CRM and Lead Management by vcita < 2.7.0 - Contributor+ Stored Cross-Site Scripting
Published
2014-08-01
Title
Download Manager <= 2.2.2 - admin.php cid Parameter XSS
Published
2024-02-20
Title
Tabs Shortcode and Widget <= 1.17 - Contributor+ Stored Cross-Site Scripting