Beaver Builder < 2.7.2.1 - Contributor+ Stored XSS

2024-01-0500:00:00

wpscan.com

beaver builder

stored xss

contributor roles

plugin vulnerability

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

JSON

Description The plugin does not sanitise and escape some of its settings available to Contributor and above roles, which could allow them to perform Stored Cross-Site Scripting attacks

CPENameOperatorVersion
eq2.7.2.1

CPE	Name	Operator	Version
		eq	2.7.2.1

References

patchstack.com/database/vulnerability/beaver-builder-lite-version/wordpress-beaver-builder-plugin-2-7-2-cross-site-scripting-xss-vulnerability