{"affected":[{"defaultStatus":"unaffected","product":"Live Composer","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"2.1.24","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-119531","cwes":["CWE-79"],"description":"The Live Composer  WordPress plugin before 2.1.24 does not escape several attributes of one of its page-builder shortcodes before outputting them inside HTML tag attributes, allowing users with the Contributor role and above to store a payload that executes in the browser of anyone who views the post, including an administrator reviewing the pending submission.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/493ae475-0595-4421-812e-304315457329/"}],"kev":null,"metrics":[],"modifiedAt":1794376810726,"publishedAt":1794376810726,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/493ae475-0595-4421-812e-304315457329/"}],"remediation":[],"revision":"5ab4edc8fad1019046f3c3d43623339bdf260699b73e8608576549343ffa45ad","sources":[{"modifiedAt":1794376810726,"name":"CNA: WPScan","retrievedAt":1794377386124,"url":"https://www.cve.org/CVERecord?id=CVE-2026-119531"}],"ssvc":null,"status":"published","title":"Live Composer < 2.1.24 - Contributor+ Stored XSS via Module Area Shortcode","updatedAt":1794377386124}