Landing Page Builder < 1.4.9.6 - Authenticated Reflected Cross-Site Scripting (XSS)
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 1.3%
exploitation probability
1.3%top 33% of all CVEs
observed exploitation
nono source reports it
The Landing Page Builder WordPress plugin before 1.4.9.6 was affected by a reflected XSS in page-builder-add on the ulpb_post admin page.