CVE-2026-16787 | Live Composer Plugin up to 2.1.19 on WordPress Shortcode dslc_custom_field cross site scripting

September 1, 2026 Yanac

A vulnerability described as problematic has been identified in Live Composer Plugin up to 2.1.19 on WordPress. This affects an unknown part of the component Shortcode Handler. The manipulation of the argument dslc_custom_field results in cross site scripting.

This vulnerability is reported as CVE-2026-16787. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More