CVE-2024-37278

CVE-2024-37278 is a WordPress vulnerability in the Cards for Beaver Builder plugin (bb-bootstrap-cards) affecting versions n/a–1.1.4. The issue is an improper neutralization of input during web page generation, enabling an authenticated user to trigger cross-site scripting (XSS). Multiple sources...

CVE-2024-37278: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Pratik Chaskar Cards for Beaver Builder.This issue affects Cards for Beaver Builder: from n/a through 1.1.4...