All 2 CVE vulnerabilities found in Livemesh SiteOrigin Widgets, with AI-generated Chinese analysis, references, and POCs.
Vendor: livemesh
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-3896 | Livemesh SiteOrigin Widgets <= 3.9.2 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting CWE-862 | 6.4 | Medium | 2026-05-27 |
| CVE-2025-8780 | Livemesh SiteOrigin Widgets <= 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Hero Header and Pricing Table Widgets CWE-79 | 6.4 | Medium | 2025-12-13 |
All 2 known CVE vulnerabilities affecting Livemesh SiteOrigin Widgets with full Chinese analysis, references, and POCs where available.