Stored Cross-Site Scripting in Beaver Builder Heading HTML Tag and Container Element

Skrevet den af i Beaver Builder Page Builder

Authenticated users with Contributor access or higher can store a crafted value in the Heading module’s HTML tag or in a module, row or column Container Element setting. The value is printed as the element name of the rendered tag, allowing arbitrary attributes and scripts to be injected into pages viewed by other users, including administrators.

This vulnerability affects the following application versions:

  • Beaver Builder Page Builder 2.1.3.4
  • Beaver Builder Page Builder 2.1.4.1
  • Beaver Builder Page Builder 2.1.4.2
  • Beaver Builder Page Builder 2.1.4.3
  • Beaver Builder Page Builder 2.1.4.5
  • Beaver Builder Page Builder 2.1.6.3
  • Beaver Builder Page Builder 2.1.7.2
  • Beaver Builder Page Builder 2.2.0.6
  • Beaver Builder Page Builder 2.2.1.4
  • Beaver Builder Page Builder 2.2.1.5
  • Beaver Builder Page Builder 2.2.2.5
  • Beaver Builder Page Builder 2.2.4.3
  • Beaver Builder Page Builder 2.2.5.3
  • Beaver Builder Page Builder 2.2.6.1
  • Beaver Builder Page Builder 2.2.6.3
  • Beaver Builder Page Builder 2.3.1.1
  • Beaver Builder Page Builder 2.3.2.5
  • Beaver Builder Page Builder 2.3.2.8
  • Beaver Builder Page Builder 2.4.0.5
  • Beaver Builder Page Builder 2.4.1.2
  • Beaver Builder Page Builder 2.4.1.3
  • Beaver Builder Page Builder 2.4.2
  • Beaver Builder Page Builder 2.4.2.1
  • Beaver Builder Page Builder 2.4.2.2
  • Beaver Builder Page Builder 2.4.2.4
  • Beaver Builder Page Builder 2.4.2.5
  • Beaver Builder Page Builder 2.5.1
  • Beaver Builder Page Builder 2.5.1.1
  • Beaver Builder Page Builder 2.5.1.3
  • Beaver Builder Page Builder 2.5.2.1
  • Beaver Builder Page Builder 2.5.2.3
  • Beaver Builder Page Builder 2.5.3.1
  • Beaver Builder Page Builder 2.5.4.2
  • Beaver Builder Page Builder 2.5.4.3
  • Beaver Builder Page Builder 2.5.4.4
  • Beaver Builder Page Builder 2.5.4.5
  • Beaver Builder Page Builder 2.5.4.6
  • Beaver Builder Page Builder 2.5.5.3
  • Beaver Builder Page Builder 2.5.5.5
  • Beaver Builder Page Builder 2.6.0.3
  • Beaver Builder Page Builder 2.6.1.4
  • Beaver Builder Page Builder 2.6.2
  • Beaver Builder Page Builder 2.6.2.3
  • Beaver Builder Page Builder 2.6.3
  • Beaver Builder Page Builder 2.6.3.1
  • Beaver Builder Page Builder 2.6.3.2
  • Beaver Builder Page Builder 2.7.0.5
  • Beaver Builder Page Builder 2.7.1.1
  • Beaver Builder Page Builder 2.7.2
  • Beaver Builder Page Builder 2.7.2.1
  • Beaver Builder Page Builder 2.7.3
  • Beaver Builder Page Builder 2.7.3.1
  • Beaver Builder Page Builder 2.7.3.2
  • Beaver Builder Page Builder 2.7.4.1
  • Beaver Builder Page Builder 2.7.4.2
  • Beaver Builder Page Builder 2.7.4.3
  • Beaver Builder Page Builder 2.7.4.4

Stored Cross-Site Scripting in Beaver Builder Page Builder Button Module

Skrevet den af i Beaver Builder Page Builder

Beaver Builder Page Builder before 2.8.0.7 prints the module’s ID setting unescaped in the Button module (lightbox mode) and the Icon module. An authenticated user with Contributor-level access or higher can store HTML attributes in that setting that run script in the browser of anyone viewing the page.

This vulnerability affects the following application versions:

  • Beaver Builder Page Builder 2.4.0.5
  • Beaver Builder Page Builder 2.4.1.2
  • Beaver Builder Page Builder 2.4.1.3
  • Beaver Builder Page Builder 2.4.2
  • Beaver Builder Page Builder 2.4.2.1
  • Beaver Builder Page Builder 2.4.2.2
  • Beaver Builder Page Builder 2.4.2.4
  • Beaver Builder Page Builder 2.4.2.5
  • Beaver Builder Page Builder 2.5.1
  • Beaver Builder Page Builder 2.5.1.1
  • Beaver Builder Page Builder 2.5.1.3
  • Beaver Builder Page Builder 2.5.2.1
  • Beaver Builder Page Builder 2.5.2.3
  • Beaver Builder Page Builder 2.5.3.1
  • Beaver Builder Page Builder 2.5.4.2
  • Beaver Builder Page Builder 2.5.4.3
  • Beaver Builder Page Builder 2.5.4.4
  • Beaver Builder Page Builder 2.5.4.5
  • Beaver Builder Page Builder 2.5.4.6
  • Beaver Builder Page Builder 2.5.5.3
  • Beaver Builder Page Builder 2.5.5.5
  • Beaver Builder Page Builder 2.6.0.3
  • Beaver Builder Page Builder 2.6.1.4
  • Beaver Builder Page Builder 2.6.2
  • Beaver Builder Page Builder 2.6.2.3
  • Beaver Builder Page Builder 2.6.3
  • Beaver Builder Page Builder 2.6.3.1
  • Beaver Builder Page Builder 2.6.3.2
  • Beaver Builder Page Builder 2.7.0.5
  • Beaver Builder Page Builder 2.7.1.1
  • Beaver Builder Page Builder 2.7.2
  • Beaver Builder Page Builder 2.7.2.1
  • Beaver Builder Page Builder 2.7.3
  • Beaver Builder Page Builder 2.7.3.1
  • Beaver Builder Page Builder 2.7.3.2
  • Beaver Builder Page Builder 2.7.4.1
  • Beaver Builder Page Builder 2.7.4.2
  • Beaver Builder Page Builder 2.7.4.3
  • Beaver Builder Page Builder 2.7.4.4
  • Beaver Builder Page Builder 2.7.4.5
  • Beaver Builder Page Builder 2.8.0.4
  • Beaver Builder Page Builder 2.8.0.5