Reference page — cumulative record through Saturday, October 3, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CVE-2024-35768
Live Composer Team Page Builder: Live Composer — WordPress Page Builder: Live Composer plugin <= 2.1.22 - Cross Site Scripting (XSS) vulnerability
AV AC PR UI S C I A CVSS EPSS %ile KEV
N L H R C L L N 4.8 .0032 22.2 —
AFFECTED
Product Versions Fixed
Page Builder: Live Composer unspecified —
TIMELINE
May 17 Reserved by Patchstack
Jun 21 Published (CNA: Patchstack)
Sep 21 RESCORED — CVE-2024-35768 (Live Composer Team Page Builder: Live Composer). CVSS 5.9 → 4.8 (NVD).
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-builder allows DOM-Based XSS.This issue affects Page Builder: Live Composer: from n/a through 2.1.22.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
|---|
| May 17, 2024 | Reserved | Reserved by Patchstack |
| June 21, 2024 | Published | Published (CNA: Patchstack) |
| September 21, 2026 | RESCORED | RESCORED — CVE-2024-35768 (Live Composer Team Page Builder: Live Composer). CVSS 5.9 → 4.8 (NVD). |
Affected
Affected products and packages — 1 row
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|
| Live Composer Team | Page Builder: Live Composer | — | — | — |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-35768 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Saturday, October 3, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
