CVE-2024-43953: WordPress Classic Addons – WPBakery Page Builder plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webcodingplace Classic Addons – WPBakery Page Builder classic-addons-wpbakery-page-builder-addons allows Stored XSS.This issue affects Classic Addons – WPBakery Page Builder: from n/a through <= 3.5.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43953?
CVE-2024-43953 is classified as a high-severity vulnerability due to its potential for allowing stored cross-site scripting (XSS) attacks.
How do I fix CVE-2024-43953?
To mitigate CVE-2024-43953, upgrade the Classic Addons – WPBakery Page Builder plugin to a version beyond 3.0.
What types of attacks can CVE-2024-43953 enable?
CVE-2024-43953 can enable attackers to execute stored XSS attacks, compromising user data and potentially hijacking user sessions.
Which versions of WPBakery Page Builder are affected by CVE-2024-43953?
CVE-2024-43953 affects all versions of Classic Addons – WPBakery Page Builder up to and including version 3.0.
Is CVE-2024-43953 easy to exploit?
Yes, CVE-2024-43953 can be easily exploited by attackers who can inject malicious scripts into web pages served by the affected plugin.