Stored Cross-Site Scripting in Beaver Builder Page Builder Button Module

Beaver Builder Page Builder before 2.8.0.7 prints the module’s ID setting unescaped in the Button module (lightbox mode) and the Icon module. An authenticated user with Contributor-level access or higher can store HTML attributes in that setting that run script in the browser of anyone viewing the page.

This vulnerability affects the following application versions:

• Beaver Builder Page Builder 2.4.0.5
• Beaver Builder Page Builder 2.4.1.2
• Beaver Builder Page Builder 2.4.1.3
• Beaver Builder Page Builder 2.4.2
• Beaver Builder Page Builder 2.4.2.1
• Beaver Builder Page Builder 2.4.2.2
• Beaver Builder Page Builder 2.4.2.4
• Beaver Builder Page Builder 2.4.2.5
• Beaver Builder Page Builder 2.5.1
• Beaver Builder Page Builder 2.5.1.1
• Beaver Builder Page Builder 2.5.1.3
• Beaver Builder Page Builder 2.5.2.1
• Beaver Builder Page Builder 2.5.2.3
• Beaver Builder Page Builder 2.5.3.1
• Beaver Builder Page Builder 2.5.4.2
• Beaver Builder Page Builder 2.5.4.3
• Beaver Builder Page Builder 2.5.4.4
• Beaver Builder Page Builder 2.5.4.5
• Beaver Builder Page Builder 2.5.4.6
• Beaver Builder Page Builder 2.5.5.3
• Beaver Builder Page Builder 2.5.5.5
• Beaver Builder Page Builder 2.6.0.3
• Beaver Builder Page Builder 2.6.1.4
• Beaver Builder Page Builder 2.6.2
• Beaver Builder Page Builder 2.6.2.3
• Beaver Builder Page Builder 2.6.3
• Beaver Builder Page Builder 2.6.3.1
• Beaver Builder Page Builder 2.6.3.2
• Beaver Builder Page Builder 2.7.0.5
• Beaver Builder Page Builder 2.7.1.1
• Beaver Builder Page Builder 2.7.2
• Beaver Builder Page Builder 2.7.2.1
• Beaver Builder Page Builder 2.7.3
• Beaver Builder Page Builder 2.7.3.1
• Beaver Builder Page Builder 2.7.3.2
• Beaver Builder Page Builder 2.7.4.1
• Beaver Builder Page Builder 2.7.4.2
• Beaver Builder Page Builder 2.7.4.3
• Beaver Builder Page Builder 2.7.4.4
• Beaver Builder Page Builder 2.7.4.5
• Beaver Builder Page Builder 2.8.0.4
• Beaver Builder Page Builder 2.8.0.5