Vendor
An unauthenticated stored XSS vulnerability in the Colibri Page Builder plugin for WordPress allows attackers to inject malicious scripts via the comment parameter that execute in the context of user browsers.