Advisories · Technology
Bold Page Builder.
Every CVE that names Bold Page Builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
Bold Page Builder < 5.9.9 - Contributor+ Stored XSS via Slider Elements' additional_settings
- Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.8 Medium
Bold Page Builder < 5.9.8 - Contributor+ Stored XSS via Multiple Shortcode Element Attributes
- Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.8 Medium
Bold Page Builder < 5.9.8 - Contributor+ Stored XSS via bt_bb_button/bt_bb_headline/bt_bb_icon URL
- Bold Page Builder
- Cross-site scripting (XSS)
-
Bold Page Builder < 4.3.3 - Admin+ Stored Cross-Site Scripting
- Bold Page Builder
- Cross-site scripting (XSS)
-
Bold Page Builder < 3.1.6 - PHP Object Injection
- Bold Page Builder
- Insecure deserialization