CVE-2026-57337 Unauthenticated Cross Site Scripting (XSS) in Landing Page Builder <= 1.5.3.5 versions

Description

Unauthenticated Cross Site Scripting (XSS) in Landing Page Builder <= 1.5.3.5 versions.

Affected products and versions

Product	Affected versions	Fixed in
Landing Page Builder 1.5	earliest → 1.5.3.5	No fix stated

Other CVEs of Landing Page Builder

The 6 CVEs of Landing Page Builder →

CVE-2026-24620 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps… 5.9 Medium CVE-2024-43345 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PluginOps Landing Page… 7.5 High CVE-2024-34752 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PluginOps… 7.1 High CVE-2024-30452 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps… 5.9 Medium