Vendor
kingthemes
3 known vulnerabilities.
1 result · Clear filters · Feed
-
Medium 5.5
Page Builder: KingComposer < 2.9.4 - Stored Cross-Site Scripting
The Page Builder: KingComposer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via via shortcode in versions before 2.9.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to injec…