Stored Cross-Site Scripting in Beaver Builder Heading HTML Tag and Container Element

Authenticated users with Contributor access or higher can store a crafted value in the Heading module’s HTML tag or in a module, row or column Container Element setting. The value is printed as the element name of the rendered tag, allowing arbitrary attributes and scripts to be injected into pages viewed by other users, including administrators.

This vulnerability affects the following application versions:

• Beaver Builder Page Builder 2.1.3.4
• Beaver Builder Page Builder 2.1.4.1
• Beaver Builder Page Builder 2.1.4.2
• Beaver Builder Page Builder 2.1.4.3
• Beaver Builder Page Builder 2.1.4.5
• Beaver Builder Page Builder 2.1.6.3
• Beaver Builder Page Builder 2.1.7.2
• Beaver Builder Page Builder 2.2.0.6
• Beaver Builder Page Builder 2.2.1.4
• Beaver Builder Page Builder 2.2.1.5
• Beaver Builder Page Builder 2.2.2.5
• Beaver Builder Page Builder 2.2.4.3
• Beaver Builder Page Builder 2.2.5.3
• Beaver Builder Page Builder 2.2.6.1
• Beaver Builder Page Builder 2.2.6.3
• Beaver Builder Page Builder 2.3.1.1
• Beaver Builder Page Builder 2.3.2.5
• Beaver Builder Page Builder 2.3.2.8
• Beaver Builder Page Builder 2.4.0.5
• Beaver Builder Page Builder 2.4.1.2
• Beaver Builder Page Builder 2.4.1.3
• Beaver Builder Page Builder 2.4.2
• Beaver Builder Page Builder 2.4.2.1
• Beaver Builder Page Builder 2.4.2.2
• Beaver Builder Page Builder 2.4.2.4
• Beaver Builder Page Builder 2.4.2.5
• Beaver Builder Page Builder 2.5.1
• Beaver Builder Page Builder 2.5.1.1
• Beaver Builder Page Builder 2.5.1.3
• Beaver Builder Page Builder 2.5.2.1
• Beaver Builder Page Builder 2.5.2.3
• Beaver Builder Page Builder 2.5.3.1
• Beaver Builder Page Builder 2.5.4.2
• Beaver Builder Page Builder 2.5.4.3
• Beaver Builder Page Builder 2.5.4.4
• Beaver Builder Page Builder 2.5.4.5
• Beaver Builder Page Builder 2.5.4.6
• Beaver Builder Page Builder 2.5.5.3
• Beaver Builder Page Builder 2.5.5.5
• Beaver Builder Page Builder 2.6.0.3
• Beaver Builder Page Builder 2.6.1.4
• Beaver Builder Page Builder 2.6.2
• Beaver Builder Page Builder 2.6.2.3
• Beaver Builder Page Builder 2.6.3
• Beaver Builder Page Builder 2.6.3.1
• Beaver Builder Page Builder 2.6.3.2
• Beaver Builder Page Builder 2.7.0.5
• Beaver Builder Page Builder 2.7.1.1
• Beaver Builder Page Builder 2.7.2
• Beaver Builder Page Builder 2.7.2.1
• Beaver Builder Page Builder 2.7.3
• Beaver Builder Page Builder 2.7.3.1
• Beaver Builder Page Builder 2.7.3.2
• Beaver Builder Page Builder 2.7.4.1
• Beaver Builder Page Builder 2.7.4.2
• Beaver Builder Page Builder 2.7.4.3
• Beaver Builder Page Builder 2.7.4.4