CVE-2024-6848

🗓️ 20 Jul 2024 12:02:15Reported by WordfenceType

The Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file uploads in all versions up to, and including, 1.26.6 due to insufficient input sanitization and output escaping

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
Vulnrichment	CVE-2024-6848 Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via File Upload	20 Jul 202411:18	–	vulnrichment
NVD	CVE-2024-6848	20 Jul 202412:15	–	nvd
Cvelist	CVE-2024-6848 Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via File Upload	20 Jul 202411:18	–	cvelist
Veracode	Cross-Site Scripting (XSS)	23 Jul 202406:43	–	veracode
OSV	CVE-2024-6848	20 Jul 202412:15	–	osv
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (July 15, 2024 to July 21, 2024)	25 Jul 202414:49	–	wordfence

Nvd

Vulners

Node

boldgrid post_and_page_builderRange<1.26.7wordpress

[
  {
    "vendor": "boldgrid",
    "product": "Post and Page Builder by BoldGrid – Visual Drag and Drop Editor",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.26.6",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
github	www.github.com/BoldGrid/post-and-page-builder/pull/613/commits/64c33a6d0c9dbb0151d3af5fee9e026df6c5a2f6
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/4d5dcec8-fa36-43ab-9a35-0b391fe1d88e
plugins	www.plugins.trac.wordpress.org/browser/post-and-page-builder/tags/1.26.6/includes/class-boldgrid-editor-ajax.php
wordpress	www.wordpress.org/plugins/post-and-page-builder/
github	www.github.com/BoldGrid/post-and-page-builder/issues/612

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

20 Jul 2024 12:15Current

5.7Medium risk

Vulners AI Score5.7

CVSS35.4 - 6.4

EPSS0.00086

SSVC

CWE-79