CVE-2026-62138

Visual Composer Website Builder versions up to 45.16.1 are vulnerable to a Contributor Cross-Site Scripting (XSS) flaw, which could allow attackers to inject malicious scripts into web pages viewed by users. This vulnerability poses a medium risk, potentially compromising user data and session integrity. Website administrators using affected versions should prioritize remediation to protect against potential exploitation.