CVE-2024-6848 Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via File Upload

🗓️ 20 Jul 2024 11:18:27Reported by GoogleType

osv🔗 osv.dev👁 5 Views

Stored Cross-Site Scripting vulnerability in BoldGrid plugin for WordPress due to inadequate input sanitization.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-6848	20 Jul 202414:47	–	circl
CVE	CVE-2024-6848	20 Jul 202411:18	–	cve
Cvelist	CVE-2024-6848 Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via File Upload	20 Jul 202411:18	–	cvelist
EUVD	EUVD-2024-47851	3 Oct 202520:07	–	euvd
NVD	CVE-2024-6848	20 Jul 202412:15	–	nvd
Patchstack	WordPress Post and Page Builder by BoldGrid plugin <= 1.26.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via File Upload vulnerability	2 Feb 202608:40	–	patchstack
RedhatCVE	CVE-2024-6848	23 May 202508:00	–	redhatcve
Veracode	Cross-Site Scripting (XSS)	23 Jul 202406:43	–	veracode
Vulnrichment	CVE-2024-6848 Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via File Upload	20 Jul 202411:18	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (July 15, 2024 to July 21, 2024)	25 Jul 202414:49	–	wordfence

Source	Link
github	www.github.com/BoldGrid/post-and-page-builder/pull/613/commits/64c33a6d0c9dbb0151d3af5fee9e026df6c5a2f6
plugins	www.plugins.trac.wordpress.org/browser/post-and-page-builder/tags/1.26.6/includes/class-boldgrid-editor-ajax.php
wordpress	www.wordpress.org/plugins/post-and-page-builder/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/4d5dcec8-fa36-43ab-9a35-0b391fe1d88e
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6848.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-6848
github	www.github.com/BoldGrid/post-and-page-builder/issues/612

08 Jul 2026 06:35Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16.4

EPSS0.00466