Description
The FunnelKit WordPress plugin before 3.15.0.6 does not escape a user-supplied parameter before reflecting it into the HTML response of one of its page-builder AJAX actions, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting against logged-in users who open a crafted page. The affected action is only registered when the Divi /builder is active.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | FunnelKit | < 3.15.0.6 | 3.15.0.6 |
References
- https://wpscan.com/vulnerability/1b22645b-28cb-44f3-a5b9-c81a40175e59/ exploit vdb-entry technical-description