Cross-site Scripting Vulnerability in Visual Composer Website Builder by Visual Composer

CVE-2025-55709

What is CVE-2025-55709?

A Cross-site Scripting (XSS) vulnerability has been identified in the Visual Composer Website Builder, allowing attackers to inject malicious scripts into web pages generated by the plugin. This could lead to unauthorized actions, data theft, or the distribution of malware to users accessing affected sites. This vulnerability poses a significant risk as it can potentially compromise user information and website integrity if left unaddressed.

References