5.9
Medium
CVE-2026-24620 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps Landing Page Builder page-builder-add allows Stored XSS.This issue affects Landing Page Builder: from n/a through <= 1.5.3.4.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Landing Page Builder 1.5 | earliest → 1.5.3.4 | No fix stated |
Other CVEs of Landing Page Builder
The 6 CVEs of Landing Page Builder →
CVE-2026-57337
Unauthenticated Cross Site Scripting (XSS) in Landing Page Builder <= 1.5.3.5 versions
7.1
High
CVE-2024-43345
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PluginOps Landing Page…
7.5
High
CVE-2024-34752
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PluginOps…
7.1
High
CVE-2024-30452
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps…
5.9
Medium