Brizy < 2.3.12 - Authenticated Stored Cross-Site Scripting

Description

While the Brizy – Page Builder plugin does not offer a direct way for lower-privileged users such as contributors to add JavaScript to page content, it was possible for a lower-privileged user to modify a request sent to update a page via the brizy_update_item AJAX action by adding JavaScript to the data parameter. The added JavaScript would then be be executed if the post was viewed or previewed by another user, such as an administrator.

Thanks to a separate authorization check vulnerability, even the lowest-privileged users, such as subscribers, could add malicious JavaScript to any page