Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-35779 EUVD-2024-35537GHSA-9pp5-g326-qcxc

WordPress Page Builder: Live Composer plugin <= 1.5.42 - Contributor+ Shortcode Cross Site Scripting (XSS) vulnerability

Published Jun 21, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Live Composer Team Page Builder: Live Composer allows Stored XSS.This issue affects Page Builder: Live Composer: from n/a through 1.5.42.

Affected products

VendorProductAffectedFixed
Live Composer Team Page Builder: Live Composer ≤ 1.5.42 —

References