Visualcomposer

Visual Composer Website Builder

9 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2025-55709

  • EPSS 0.06%
  • Veröffentlicht 14.08.2025 18:21:31
  • Zuletzt bearbeitet 15.08.2025 13:12:51

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder allows Stored XSS. This issue affects Visual Composer Website Builder: from n/a through n/a.

6.5

CVE-2025-48276

  • EPSS 0.03%
  • Veröffentlicht 19.05.2025 14:45:25
  • Zuletzt bearbeitet 21.05.2025 20:25:33

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder allows Stored XSS. This issue affects Visual Composer Website Builder: from n/a through 45.11.0.

5.4

CVE-2025-46254

  • EPSS 0.02%
  • Veröffentlicht 22.04.2025 09:53:35
  • Zuletzt bearbeitet 30.04.2025 14:59:42

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder allows Stored XSS. This issue affects Visual Composer Website Builder: from n/a through 45.10.0.

5.4

CVE-2024-35653

  • EPSS 0.16%
  • Veröffentlicht 04.06.2024 15:15:46
  • Zuletzt bearbeitet 21.11.2024 09:20:35

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in visualcomposer.Com Visual Composer Website Builder allows Stored XSS.This issue affects Visual Composer Website Builder: from n/a through 45....

5.9

CVE-2024-27997

  • EPSS 0.06%
  • Veröffentlicht 19.03.2024 17:15:10
  • Zuletzt bearbeitet 21.11.2024 09:05:35

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visualcomposer Visual Composer Website Builder allows Stored XSS.This issue affects Visual Composer Website Builder: from n/a through 45.6.0.

5.4

CVE-2023-6880

  • EPSS 0.15%
  • Veröffentlicht 13.03.2024 16:15:09
  • Zuletzt bearbeitet 07.02.2025 17:53:27

The Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom fields in all versions up to, and includin...

4.8

CVE-2020-36722

Exploit
  • EPSS 0.09%
  • Veröffentlicht 07.06.2023 02:15:12
  • Zuletzt bearbeitet 21.11.2024 05:30:09

The Visual Composer plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 26.0 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts tha...

5.4

CVE-2022-2516

  • EPSS 0.17%
  • Veröffentlicht 06.09.2022 18:15:14
  • Zuletzt bearbeitet 21.11.2024 07:01:09

The Visual Composer Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post/page 'Title' value in versions up to, and including, 45.0 due to insufficient input sanitization and output escaping. This makes it pos...

5.4

CVE-2022-2430

  • EPSS 0.17%
  • Veröffentlicht 06.09.2022 18:15:13
  • Zuletzt bearbeitet 21.11.2024 07:00:58

The Visual Composer Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Text Block' feature in versions up to, and including, 45.0 due to insufficient input sanitization and output escaping. This makes it possib...