Stored Cross-Site Scripting Vulnerability in Bold Page Builder Plugin

CVE-2025-3715

What is CVE-2025-3715?

The Bold Page Builder plugin for WordPress suffers from a Stored Cross-Site Scripting vulnerability caused by inadequate input sanitization and output escaping. This affects all versions up to 5.3.5, allowing authenticated users with Contributor-level access or higher to inject malicious web scripts. Such scripts can be executed when other users access compromised pages, posing significant security risks to site integrity and user trust. It is crucial for site administrators to apply necessary updates or patches to mitigate potential attacks.

References