medium6.4
CVE-2020-28650
The WPBakery plugin before 6.4.1 for WordPress allows XSS because it calls kses_remove_filters to disable the standard WordPress XSS protection mechanism for t…
Impact
The WPBakery plugin before 6.4.1 for WordPress allows XSS because it calls kses_remove_filters to disable the standard WordPress XSS protection mechanism for the Author and Contributor roles.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wpbakery | Page Builder | before 6.4.1 |