CVE-2023-0367

Published: Apr 17, 2023Modified: Jun 17, 2026

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) WordPress plugin before 3.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

Affected (1)

Products: Pricing Tables For Wpbakery Page Builder Project: Pricing Tables For Wpbakery Page Builder

Pricing Tables For Wpbakery Page Builder Project

1 product

Pricing Tables For Wpbakery Page Builder

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Pricing Tables For Wpbakery Page Builder Project Pricing Tables For Wpbakery Page Builder	version < 3.0

References (2)

https://wpscan.com/vulnerability/d7685af2-6034-49ea-93ef-4debe72689bc

Source: contact@wpscan.com

ExploitThird Party Advisory

https://wpscan.com/vulnerability/d7685af2-6034-49ea-93ef-4debe72689bc

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.