The Bold Page Builder plugin for WordPress has a security issue called Stored Cross-Site Scripting. This vulnerability exists in versions up to and including 5.1.0 because the plugin does not properly filter the input and output of data. This means that people who have contributor-level access or higher can insert harmful scripts into pages that will run when someone views the page.