CyberRota Analysis
AI-GeneratedThe Bold Page Builder plugin for WordPress prior to version 5.9.8 is vulnerable due to inadequate sanitization and escaping of shortcode attributes, enabling users with Contributor roles and higher to inject malicious scripts. This could lead to cross-site scripting (XSS) attacks, potentially compromising the security of users who visit the affected pages. WordPress site administrators and developers using this plugin should prioritize updating to the latest version to mitigate the risk.
Original NVD Description
The Bold Page Builder WordPress plugin before 5.9.8 does not sanitise and escape several shortcode attributes before outputting them in HTML attributes, allowing users with the Contributor role and above to inject arbitrary web scripts that execute when a user views the affected page.