Vulnerabilities

TI-2024-23637 CVE-2024-35768 · GHSA-9fm6-mqj4-6fg4

WordPress Page Builder: Live Composer plugin <= 2.1.22 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-builder allows DOM-Based XSS.This issue affects Page…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00315 Published 2024-06-21 No fix listed CWE-79

TI-2024-23648 CVE-2024-35779 · GHSA-9pp5-g326-qcxc

WordPress Page Builder: Live Composer plugin <= 1.5.42 - Contributor+ Shortcode Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Live Composer Team Page Builder: Live Composer allows Stored XSS.This issue affects Page Builder: Live Composer…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00295 Published 2024-06-21 No fix listed CWE-79

TI-2023-28621 CVE-2023-52193 · GHSA-gwfv-rx78-gch3

WordPress Page Builder: Live Composer Plugin <= 1.5.23 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Live Composer Team Page Builder: Live Composer allows Stored XSS.This issue affects Page Builder: Live Composer: from…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0031 Published 2024-02-01 No fix listed CWE-79

TI-2023-28634 CVE-2023-52206 · GHSA-x8v8-8hj9-w975

WordPress Page Builder: Live Composer Plugin <= 1.5.25 is vulnerable to PHP Object Injection

LOW 36

Deserialization of Untrusted Data vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-builder.This issue affects Page Builder: Live Composer: from n/a through 1.5.25.

CVSS 3.1HIGH 7.7 Network High privileges No interaction EPSS 0.00496 Published 2024-01-08 No fix listed CWE-502

TI-2022-04267 CVE-2022-4669 · GHSA-4mw6-hf2w-jx7x

Page Builder: Live Composer < 1.5.23 - Contributor+ Stored XSS via Shortcode

MEDIUM 58

The Page Builder: Live Composer WordPress plugin before 1.5.23 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow user…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00393 Published 2023-02-21 Fixed in 1.5.23 CWE-79