Threats tagged 'ghsa-mv4q-mp57-pwq7'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-119073The Live Composer WordPress plugin before 2.1.23 does not escape a pagination setting supplied through its High2026-11-07GCVE DatabaseCVE-2026-119073 The Live Composer WordPress plugin versions before 2.1.23 contain a vulnerability where a pagination setting supplied through post-listing module shortcodes is not properly escaped before being output in an HTML attribute. This flaw allows users with Contributor role or higher to execute Stored Cross-Site Scripting (XSS) attacks. Report on CVE-2026-119073 Vulnerability #ghsa-mv4q-mp57-pwq7	GCVE Database	2026-11-07

Page 1 of 1