CVE-2026-5920 | Boldmes Bold Page Builder Plugin up to 5.9.6 on WordPress Shortcode bt_bb_shortcode shortcode_content cross site scripting

September 16, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Boldmes Bold Page Builder Plugin up to 5.9.6 on WordPress. This vulnerability affects the function bt_bb_shortcode of the component Shortcode Handler. Performing a manipulation of the argument shortcode_content results in cross site scripting.

This vulnerability is identified as CVE-2026-5920. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More