Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages, 9fe4340b-5dfa-4fd0-a100-516e4181020e
- CVE, Research URL
- Published on
- -
- Research Description
- Visual Composer Website Builder [visualcomposer] < 27.0 Visual Composer < 27.0 - Multiple Authenticated Cross-Site Scripting Issues Jerome Braundet from NinTechNet, discovered multiple Stored Cross-Site Scripting issues, which could allow users with the contributor and above roles to inject arbitrary JavaScript in the blog.
- Affected versions
-
max 27.0.
- Status
-
vulnerable