Threats tagged 'ghsa-r99m-prj7-4m2g'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2025-15714The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its Button module settings High2026-11-11GCVE DatabaseCVE-2025-15714 The Live Composer WordPress plugin versions before 2.1.24 have a vulnerability where some Button module settings are not properly sanitized and escaped before being output on the front end. This flaw allows high-privilege users, such as administrators, to perform stored cross-site scripting (XSS) attacks even if the unfiltered_html capability is disabled, such as in multisite WordPress setups. Report on CVE-2025-15714 Vulnerability #ghsa-r99m-prj7-4m2g	GCVE Database	2026-11-11

Page 1 of 1