KingComposer <= 2.9.6 - Subscriber+ Stored Cross-Site Scripting
CVE-2021-25048

5.4MEDIUM

Key Information:

Vendor
Wordpress
Status
Page Builder: Kingcomposer – Free Drag And Drop Page Builder By King-theme
Vendor
CVE Published:
4 April 2022

Summary

The KingComposer WordPress plugin through 2.9.6 does not have authorisation, CSRF and sanitisation/escaping when creating profile, allowing any authenticated users to create arbitrary ones, with Cross-Site Scripting payloads in them

Affected Version(s)

Page Builder: KingComposer – Free Drag and Drop page builder by King-Theme 2.9.6

References

https://wpscan.com/vulnerability/5687e5db-d987-416d-a7f4-...
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Krzysztof Zając
.