CVE Catalog
CVE-2026-100510
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk0.25%
15th percentile - higher than 15% of all known CVEs
Summary
Unauthenticated Cross Site Scripting (XSS) in Post and Page Builder by BoldGrid versions <= 1.27.14.
Risk Assessment
An attacker can execute malicious JavaScript in a user's browser, potentially stealing sessions or performing actions in the victim's context.
Recommendation
Update the Post and Page Builder by BoldGrid plugin to a version newer than 1.27.14.
Other vulnerabilities in Post and Page Builder by BoldGrid
Original NVD description (English source)
Unauthenticated Cross Site Scripting (XSS) in Post and Page Builder by BoldGrid <= 1.27.14 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS