Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-68598 EUVD-2025-205237GHSA-36q5-9xfc-m5q6

WordPress Page Builder: Live Composer plugin <= 2.1.22 - Cross Site Scripting (XSS) vulnerability

Published Dec 24, 2025 · Updated Sep 21, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-builder allows Stored XSS.This issue affects Page Builder: Live Composer: from n/a through 2.1.22.

Affected products

VendorProductAffectedFixed
Live Composer Team Page Builder: Live Composer ≤ 2.1.22 —

References