CyberRota Analysis
AI-GeneratedThe Bold Page Builder plugin for WordPress, prior to version 5.9.9, is vulnerable due to insufficient sanitization and escaping of shortcode attributes, enabling users with Contributor roles and higher to inject malicious web scripts. This vulnerability can lead to cross-site scripting (XSS) attacks, potentially compromising user data and site integrity. WordPress site administrators and developers using this plugin should prioritize updating to the latest version to mitigate the risk.
Original NVD Description
The Bold Page Builder WordPress plugin before 5.9.9 does not sanitise and escape a shortcode attribute before outputting it in an HTML attribute, allowing users with the Contributor role and above to inject arbitrary web scripts that execute when a user views the affected page.