Vulnerabilities > Siteorigin > Siteorigin Widgets Bundle > 1.51.0

DATE CVE VULNERABILITY TITLE RISK
2024-02-05 CVE-2024-0961 Cross-site Scripting vulnerability in Siteorigin Widgets Bundle
The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the code editor in all versions up to, and including, 1.58.1 due to insufficient input sanitization and output escaping.
network
low complexity
siteorigin CWE-79
5.4