Wc Builder
Monthly
Stored cross-site scripting in HasThemes WC Builder WordPress plugin up to version 1.2.0 allows authenticated attackers with low privileges to inject arbitrary web scripts into pages created with the plugin. When victims view the crafted page, the script executes in their browser, leading to potential data theft or session hijacking.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes WC Builder allows Stored XSS.0.18. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Stored cross-site scripting in HasThemes WC Builder WordPress plugin up to version 1.2.0 allows authenticated attackers with low privileges to inject arbitrary web scripts into pages created with the plugin. When victims view the crafted page, the script executes in their browser, leading to potential data theft or session hijacking.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes WC Builder allows Stored XSS.0.18. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.