CVE-2026-12561 | tagDiv Composer Plugin up to 5.4.5 on WordPress Shortcode vc_raw_html::render cross site scripting

A vulnerability was found in tagDiv Composer Plugin up to 5.4.5 on WordPress and classified as problematic. This affects the function vc_raw_html::render of the component Shortcode. Executing a manipulation can lead to cross site scripting.

This vulnerability is registered as CVE-2026-12561. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More