Brizy Page Builder Plugin Vulnerable to Stored Cross-Site Scripting

CVE-2024-2087

What is CVE-2024-2087?

The Brizy Page Builder plugin for WordPress is subject to a stored cross-site scripting vulnerability due to inadequate input sanitization and output escaping across all versions up to and including 2.4.43. This flaw allows unauthenticated attackers to insert arbitrary web scripts into forms, leading to potential code execution on pages viewed by users. As a result, any user accessing an affected page may unknowingly execute these injected scripts, which poses a significant security risk to website integrity and user data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References