CVE-2023-39306: WordPress Avada Builder plugin <= 3.11.1 - Reflected Cross Site Scripting (XSS) vulnerability
Published Mar 27, 2024
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion Builder allows Reflected XSS.This issue affects Fusion Builder: from n/a through 3.11.1.
Affected Software
1 affected component
ThemeFusion Avada Builder<=3.11.1
Remediation
Information
Update to 3.11.2 or a higher version.
Event History
Mar 27, 2024
CVE Published
via MITRE·05:42 AM
Data Sourced
via MITRE·05:42 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-39306?
CVE-2023-39306 is classified as a reflected Cross-site Scripting (XSS) vulnerability.
2
How do I fix CVE-2023-39306?
To fix CVE-2023-39306, update ThemeFusion Fusion Builder to version 3.11.2 or newer.
3
Who is affected by CVE-2023-39306?
CVE-2023-39306 affects users of ThemeFusion Fusion Builder versions up to 3.11.1.
4
What is Cross-site Scripting in the context of CVE-2023-39306?
In the context of CVE-2023-39306, Cross-site Scripting allows an attacker to inject malicious scripts into web pages viewed by users.
5
What products are impacted by CVE-2023-39306?
CVE-2023-39306 impacts ThemeFusion Fusion Builder and WordPress Avada Builder both up to version 3.11.1.