Threats tagged 'ghsa-xvp8-9655-jh8w'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2025-15712The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its staff member settings before High2026-11-11GCVE DatabaseCVE-2025-15712 The Live Composer WordPress plugin versions before 2.1.24 contain a vulnerability where some staff member settings are not properly sanitized and escaped before being output on pages. This flaw allows high-privilege users, such as administrators, to perform Stored Cross-Site Scripting (XSS) attacks even if the unfiltered_html capability is disabled, such as in multisite WordPress setups. Report on CVE-2025-15712 Vulnerability #ghsa-xvp8-9655-jh8w	GCVE Database	2026-11-11

Page 1 of 1