A AegiFlow
MEDIUMCVSS 5.9

CVE-2024-35768

CVE-2024-35768 updated by NVD

Modified
2026-09-23
Sources
nvd

Summary

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-builder allows DOM-Based XSS.This issue affects Page Builder: Live Composer: from n/a through 2.1.22.

Affected packages

EcosystemPackageAffected versionsFixed versions
WordPresspage_builder\:_live_composer[object Object]—

References

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.