CVE-2024-54213

Name of the Vulnerable Software and Affected Versions: WordPress Page Builder – Zion Builder versions 3.6.12 and earlier

Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS, where an attacker can inject malicious scripts into the website.

Recommendations: For versions 3.6.12 and earlier, update to a version later than 3.6.12 to resolve the issue. As a temporary workaround, consider restricting access to the page builder to minimize the risk of exploitation.