CVE-2024-2305

CVE-2024-2305 concerns the WordPress plugin Cards for Beaver Builder. The vulnerability is described as a Stored Cross-Site Scripting (XSS) via the BootstrapCard link in versions up to and including 1.1.2, caused by insufficient input sanitization and output escaping on user-supplied attributes. ...

CVE-2024-37278

CVE-2024-37278 is a WordPress vulnerability in the Cards for Beaver Builder plugin (bb-bootstrap-cards) affecting versions n/a–1.1.4. The issue is an improper neutralization of input during web page generation, enabling an authenticated user to trigger cross-site scripting (XSS). Multiple sources...