7.1
High
CVE-2025-53559 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player - Addon for WPBakery Page Builder lbg-universal-video-player-addon-visual-composer allows Reflected XSS.This issue affects Universal Video Player - Addon for WPBakery Page Builder: from n/a through <= 3.2.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Universal Video Player - Addon for WPBakery Page Builder 3.2 | earliest → 3.2.1 | No fix stated |