Threats tagged 'ghsa-3575-4rpx-27v6'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2025-15711The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its module settings before High2026-11-11GCVE DatabaseCVE-2025-15711 The Live Composer WordPress plugin versions before 2.1.24 do not properly sanitise and escape certain module settings before outputting them in href attributes. This vulnerability allows high-privilege users, such as administrators, to perform Stored Cross-Site Scripting (XSS) attacks even if the unfiltered_html capability is disabled, for example in multisite WordPress setups. Report on CVE-2025-15711 Vulnerability #ghsa-3575-4rpx-27v6	GCVE Database	2026-11-11

Page 1 of 1