WordPress PowerPack Lite for Beaver Builder plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. cross-site scripting vulnerability exists in versions of the WordPress PowerPack Lite for Beaver Builder plugin prior to 1.2.9.3. The vulnerability stems from the plugin’s failure to filter and escape tag parameters before outputting to the admin page, which can be exploited by attackers to execute JavaScript code on the client side.