Description
The WPBakery plugin before 6.4.1 for WordPress allows XSS because it calls kses_remove_filters to disable the standard WordPress XSS protection mechanism for the Author and Contributor roles.
Medium · 6.4
CVE-2020-28650
EUVD-2020-21048GHSA-3w63-x258-gcc6
The WPBakery plugin before 6.4.1 for WordPress allows XSS because it calls kses_remove_filters to disable the standard WordPress XSS protec…
Published Nov 16, 2020 · Updated Aug 4, 2024 · Assigned by mitre