The Bold Page Builder plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in the 'images' parameter of its bt_bb_css_image_grid shortcode. This vulnerability affects all versions up to and including 5.7.2. It allows authenticated users with Contributor-level access or higher to inject malicious scripts that execute when other users view the affected pages.