Stored Cross-Site Scripting Vulnerability in PowerPack Lite for Beaver Builder Plugin

CVE-2024-2289

What is CVE-2024-2289?

The PowerPack Lite for Beaver Builder plugin for WordPress is susceptible to a Stored Cross-Site Scripting vulnerability, resulting from inadequate input sanitization and output escaping on user-supplied attributes. This flaw affects all versions up to and including 1.3.0 and enables attackers with contributor-level permissions or higher to inject arbitrary web scripts into pages. Consequently, these scripts may execute when users visit compromised pages, potentially compromising user data and site integrity.

References