Search
Find merged stories by title or summary.
NVD-CVE-2026-16787 - National Institute of Standards and Technology (.gov)
NVD-CVE-2026-16787 National Institute of Standards and Technology (.gov)
cve-2026-16787
Live Composer = 2. 1. 19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'dslc_custom_field' Shortcode
CVE-2026-16787 - Live Composer = 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'dslc_custom_field' Shortcode
CVE ID : CVE-2026-16787 Published : Sept. 1, 2026, 4:27 a. m. • 48 minutes ago Description : The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dslc_custom_field' Shortcode in all versions up to, and including, 2. 1. 19 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Severity: 0.0 • NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
You've reached the end of current stories for this search.
