Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-37500 EUVD-2024-36712GHSA-2q4c-rgm8-v3rp

WordPress Beaver Builder plugin <= 2.8.2.2 - Cross Site Scripting (XSS) vulnerability

Published Jul 21, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Beaver Builder Team Beaver Builder allows Stored XSS.This issue affects Beaver Builder: from n/a through 2.8.2.2.

Affected products

VendorProductAffectedFixed
The Beaver Builder Team Beaver Builder ≤ 2.8.2.2 —

References