Reflected Cross-Site Scripting Vulnerability in PowerPack Lite for Beaver Builder Plugin

CVE-2024-12239

Summary

The PowerPack Lite for Beaver Builder plugin for WordPress contains a critical vulnerability that allows for reflected cross-site scripting (XSS). This flaw, affecting all versions up to and including 1.3.0.5, is due to inadequate input sanitization and output escaping on the navigate parameter. Unauthenticated attackers can exploit this vulnerability by tricking an administrative user into executing a malicious script, potentially compromising the integrity of their web pages. It is crucial for administrators to understand this risk and apply any necessary updates or security measures to mitigate potential attacks.

References