Test ID:	1.3.6.1.4.1.25623.1.0.127630
Category:	Web application abuses
Title:	WordPress Website Builder by SeedProd Plugin < 5.1.2 XSS Vulnerability
Summary:	The WordPress plugin 'Website Builder by SeedProd' is prone to; a cross-site scripting (XSS) vulnerability.
Description:	Summary: The WordPress plugin 'Website Builder by SeedProd' is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: The Headline field under the Page Settings section along with other fields in the plugin settings are vulnerable to stored XSS, which gets triggered when the Coming Soon page is displayed (both in preview mode and live). Affected Software/OS: WordPress Website Builder by SeedProd plugin prior to version 5.1.2. Solution: Update to version 5.1.2 or later. CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-15038 http://packetstormsecurity.com/files/158649/WordPress-Maintenance-Mode-By-SeedProd-5.1.1-Cross-Site-Scripting.html https://wordpress.org/plugins/coming-soon/#developers https://wpvulndb.com/vulnerabilities/10283 https://www.getastra.com/blog/911/plugin-exploit/stored-xss-coming-soon-page-maintenance-mode-plugin/ https://www.jinsonvarghese.com/stored-xss-coming-soon-maintenance-mode-wordpress-plugin/
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.