Skip to content
OpenAdvisories
Medium · 5.9 CVE-2024-35768 EUVD-2024-35526GHSA-9fm6-mqj4-6fg4

WordPress Page Builder: Live Composer plugin <= 2.1.22 - Cross Site Scripting (XSS) vulnerability

Published Jun 21, 2024 · Updated Sep 21, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-builder allows DOM-Based XSS.This issue affects Page Builder: Live Composer: from n/a through 2.1.22.

Affected products

VendorProductAffectedFixed
Live Composer Team Page Builder: Live Composer ≤ 2.1.22 —

References