CPE

Cpe:2.3:a:cmb2:cmb2:::*:::wordpress::

1 brief RSS

Stored Cross-Site Scripting in CMB2 WordPress Plugin

The CMB2 plugin for WordPress (<= 2.13.0) is vulnerable to Stored XSS via the file_list field type, allowing unauthenticated attackers to inject malicious scripts into public-facing forms or user meta boxes.

CMB2 web-application wordpress xss

1t 1c 1w ago

Cpe:2.3:a:cmb2:cmb2:*:*:*:*:*:wordpress:*:*

Stored Cross-Site Scripting in CMB2 WordPress Plugin

Cpe:2.3:a:cmb2:cmb2:::*:::wordpress::