TI-2024-09432 CVE-2024-10172 · GHSA-3jpf-3f2w-hm6fCross-site scripting in voidCoders Innovs WPBakery Visual Composer WHMCS ElementsPriority LOW 29The WPBakery Visual Composer WHMCS Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's void_wbwhmcse_laouts_search shortcode in all versions up to, and including, 1.0.4 due to insu…CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00536 · Published 2024-11-21 · No fix listed CWE-79