Stored Cross-Site Scripting Vulnerability Affects Bold Page Builder Plugin

CVE-2024-2736

Summary

The Bold Page Builder plugin for WordPress suffers from a vulnerability that allows for Stored Cross-Site Scripting (XSS) attacks due to inadequate input sanitization and output escaping. Authenticated users with contributor-level permissions and higher can exploit this vulnerability by injecting arbitrary web scripts through user-supplied HTML tags. These scripts will execute when a page that contains the malicious code is accessed, posing significant risks to site security and user privacy. It is essential for users of affected versions to apply necessary updates and implement security measures to safeguard against potential exploits.

References