A vulnerability identified as problematic has been detected in Livemesh Addons for Beaver Builder Plugin up to 3.9.2 on WordPress. This issue affects the function
htmlspecialchars_decode of the component Shortcode Handler. Performing a manipulation of the argument title/value results in cross site scripting.
This vulnerability is cataloged as CVE-2026-2029. It is possible to initiate the attack remotely. There is no exploit available.