CVE-2023-52193

This vulnerability allows an attacker to inject malicious scripts into web pages created with the Live Composer Page Builder, which can then execute when users visit those pages, potentially stealing sensitive information or hijacking user sessions. It affects versions from the earliest release up to 1.5.42, meaning any site using these versions is at risk if they allow untrusted input to be included in the page content.

This vulnerability allows an attacker to inject malicious scripts into web pages created with the Live Composer Page Builder, which can then be executed in the browsers of users who visit those pages. It affects versions from the earliest release up to 1.5.42, meaning if you're using one of those versions, your site could be at risk if proper input validation isn't implemented.

This vulnerability allows attackers with contributor roles or higher to inject malicious scripts into web pages, potentially leading to Stored Cross-Site Scripting (XSS) attacks that can steal user data or hijack sessions. It occurs because the Page Builder plugin fails to properly check and clean up certain inputs before displaying them on the site.