Responsive Tabs For WPBakery Page Builder <= 1.1 - Contributor+ Stored XSS
CVE-2023-0368
5.4MEDIUM
What is CVE-2023-0368?
The Responsive Tabs For WPBakery Page Builder (formerly Visual Composer) WordPress plugin through 1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
Affected Version(s)
Responsive Tabs For WPBakery Page Builder (formerly Visual Composer) 0 <= 1.1