Veille CVE

Recherche « Brizy »

2 CVE

  1. CVE-2026-111844 6.5 Moyenne

    Brizy

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brizy Brizy brizy allows Stored XSS.This issue affects Brizy: 2.8.23.

  2. CVE-2026-14882 6.4 Moyenne

    themefusecom Brizy – Page Builder

    The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'brizy-compiled-sections' parameter in all versions up to, and including, 2.8.18 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.