CyberRota Analysis
AI-GeneratedThe Bold Page Builder plugin for WordPress versions prior to 5.9.8 is vulnerable due to inadequate validation of link URLs, enabling users with Contributor roles and higher to inject malicious scripts into HTML attributes. This flaw poses a risk of cross-site scripting (XSS) attacks, potentially compromising user interactions when clicking on affected links. WordPress site administrators and developers using this plugin should prioritize updating to the latest version to mitigate this vulnerability.
Original NVD Description
The Bold Page Builder WordPress plugin before 5.9.8 does not properly validate a link URL before outputting it in an HTML attribute, relying on a filter that can be evaded, allowing users with the Contributor role and above to inject arbitrary web scripts that execute when a user clicks the affected link.