{"id":"CVE-2024-35768","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-builder allows DOM-Based XSS.This issue affects Page Builder: Live Co…","summary":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-builder allows DOM-Based XSS.This issue affects Page Builder: Live Co…","severity":"medium","cvss":5.9,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L","cwe":["CWE-79"],"vendor":"blueastral","product":"page_builder:_live_composer","affected":["page_builder:_live_composer <= 1.5.42"],"published":"2024-06-21","updated":"2026-09-21","sourceUpdated":"2026-09-21T11:17:05.783","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-35768","references":[{"url":"https://patchstack.com/database/wordpress/plugin/live-composer-page-builder/vulnerability/wordpress-page-builder-live-composer-plugin-1-5-42-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com"},{"url":"https://patchstack.com/database/vulnerability/live-composer-page-builder/wordpress-page-builder-live-composer-plugin-1-5-42-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-06-21T14:01:53.724291Z"},"epss":0.00315,"epssPercentile":0.24686,"ingestedAt":"2026-09-21T11:35:54.426Z","slug":"CVE-2024-35768","body":"## Overview\n\nImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-builder allows DOM-Based XSS.This issue affects Page Builder: Live Composer: from n/a through 2.1.22.\n\n## Affected\n\n- `page_builder:_live_composer <= 1.5.42`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":33,"depthScoreParts":{"impact":32.5,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}