Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Product

Products as named in CPE, with their records.

Published
2 selected

1 record

Vendor: getwpfunnels Component: Drag & Drop Sales Funnel Builder Clear all filters
TI-2023-00167 CVE-2023-0173 · GHSA-r9hq-v925-r8jc

WPFunnels < 2.6.9 - Contributor+ Stored XSS

Priority MEDIUM 58

The Drag & Drop Sales Funnel Builder for WordPress plugin before 2.6.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could al…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00573 Published 2023-02-06 Fixed in 2.6.9