Unrated severityNVD Advisory· Published Nov 7, 2026
CVE-2026-119073
CVE-2026-119073
Description
The Live Composer WordPress plugin before 2.1.23 does not escape a pagination setting supplied through its post-listing module shortcodes before outputting it in an HTML attribute, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <2.1.23
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.