Stored Cross-Site Scripting in Beaver Builder Addons by WPZOOM for WordPress

CVE-2024-2183

What is CVE-2024-2183?

The Beaver Builder Addons by WPZOOM plugin for WordPress is susceptible to Stored Cross-Site Scripting through the Heading widget due to inadequate input sanitization and output escaping. This vulnerability allows authenticated attackers with contributor-level access or higher to inject malicious scripts into web pages, executing them whenever users visit the compromised pages. It is essential that users of this plugin update to the latest version to mitigate this risk.

References