CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.4. It affects WordPress, Java.
CVE
CVE-2021-38344
Severity
MEDIUM
CVSS
6.4
EPSS
0.61%
WordPress Java
Original NVD Description
The Brizy Page Builder plugin <= 2.3.11 for WordPress was vulnerable to stored XSS by lower-privileged users such as a subscribers. It was possible to add malicious JavaScript to a page by modifying the request sent to update the page via the brizy_update_item AJAX action and adding JavaScript to the data parameter, which would be executed in the session of any visitor viewing or previewing the post or page.
Related CVEs
Other vulnerabilities affecting the same vendor(s)