Bb Bootstrap Cards Vulnerabilities

The Cards for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘[parameter name]’ parameter in all versions up to, and including, 1.1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level access, to inj...

CVSS:

4.4

Affected:

up to 1.1.4

Fixed in:

1.1.5

Disclosed:

Jun 28, 2024

CVE-2024-37278 on NVD →

The Cards for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Cards widget in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contri...

CVSS:

6.4

Affected:

up to 1.1.3

Fixed in:

1.1.4

Disclosed:

Jun 7, 2024

CVE-2024-5663 on NVD →

The Cards for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the BootstrapCard link in all versions up to, and including, 1.1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contribut...

CVSS:

6.4

Affected:

up to 1.1.2

Fixed in:

1.1.3

Disclosed:

Mar 21, 2024

CVE-2024-2305 on NVD →