Post And Page Builder By Boldgrid
Monthly
Unauthenticated cross-site scripting (XSS) in the BoldGrid Post and Page Builder WordPress plugin (versions <= 1.27.14) allows remote attackers to inject malicious scripts into pages viewed by victims, potentially leading to cookie theft or session hijacking in the victim's browser. Exploitation requires user interaction (UI:R) and the vulnerable plugin to be active, with impact confined to the browser context. No public exploit identified at time of analysis, and no active exploitation has been confirmed.
Unauthenticated cross-site scripting (XSS) in the BoldGrid Post and Page Builder WordPress plugin (versions <= 1.27.14) allows remote attackers to inject malicious scripts into pages viewed by victims, potentially leading to cookie theft or session hijacking in the victim's browser. Exploitation requires user interaction (UI:R) and the vulnerable plugin to be active, with impact confined to the browser context. No public exploit identified at time of analysis, and no active exploitation has been confirmed.