Cross-site Scripting Vulnerability in Livemesh Addons for Beaver Builder
CVE-2025-62990
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 31 December 2025
What is CVE-2025-62990?
A Cross-site Scripting (XSS) vulnerability exists in Livemesh Addons for Beaver Builder, specifically affecting versions from n/a up to 3.9.2. This vulnerability allows for the improper neutralization of input during web page generation, leading to potential stored XSS attacks. Attackers could exploit this flaw to inject malicious scripts, which may compromise site integrity and user data. It is crucial for users and administrators to ensure they are using patched versions and implement security best practices to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Livemesh Addons for Beaver Builder <= 3.9.2
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved