Medium severity5.4NVD Advisory· Published May 6, 2021· Updated Jun 17, 2026
CVE-2021-24243
CVE-2021-24243
Description
An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.6 did not have capability checks nor sanitization, allowing low privilege users (subscriber+) to call it and set XSS payloads, which will be triggered in all backend pages.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <4.5.6
- bitorbit/WPBakery Page Builder (Visual Composer) Clipboardv5Range: 4.5.0
Patches
Vulnerability mechanics
References
2- wpscan.com/vulnerability/3bc0733a-b949-40c9-a5fb-f56814fc4af3nvdExploitThird Party Advisory
- codecanyon.net/item/visual-composer-clipboard/8897711nvdProductThird Party Advisory
News mentions
0No linked articles in our index yet.