The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) WordPress plugin before 3.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing a…
CVSS 3.1MEDIUM 6.5·Network·Low privileges·No interaction·EPSS 0.009·Published 2023-04-17·Fixed in 3.0
The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) WordPress plugin before 3.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the short…
CVSS 3.1MEDIUM 5.4·Network·Low privileges·User interaction·EPSS 0.00444·Published 2023-04-17·Fixed in 3.0