Lucene search
+L

CVE-2023-4687

🗓️ 16 Oct 2023 19:39:02Reported by WPScanType 
cve
 cve
🔗 web.nvd.nist.gov👁 98 Views🌐 WEB

Pagelayer WordPress plugin before 1.7.7 allows unauthenticated attackers to update post header or footer

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
cnnvd
CNNVD
WordPress plugin Pagelayer cross-site scripting vulnerability
16 Oct 202300:00
–cnnvd
cvelist
Cvelist
CVE-2023-4687 PageLayer < 1.7.7 - Unauthenticated Stored XSS
16 Oct 202319:39
–cvelist
euvd
EUVD
EUVD-2023-54538
3 Oct 202520:07
–euvd
nvd
NVD
CVE-2023-4687
16 Oct 202320:15
–nvd
openvas
OpenVAS
WordPress PageLayer Plugin < 1.7.7 XSS Vulnerability
17 Oct 202300:00
–openvas
osv
OSV
CVE-2023-4687
16 Oct 202320:15
–osv
patchstack
Patchstack
WordPress PageLayer Plugin < 1.7.7 is vulnerable to Cross Site Scripting (XSS)
17 Oct 202300:00
–patchstack
prion
Prion
Code injection
16 Oct 202320:15
–prion
ptsecurity
Positive Technologies
PT-2023-30252
16 Oct 202300:00
–ptsecurity
rapid7
Rapid7 Vulnerability Database (full)
CVE-2023-4687: Undefined Security Weakness
16 Oct 202300:00
–rapid7
Rows per page
NVD
Vulners
Node
pagelayerpagelayerRange<1.7.7wordpress
[
  {
    "vendor": "Unknown",
    "product": "Page Builder: Pagelayer",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "1.3.2",
        "lessThan": "1.7.7"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]
ParameterPositionPathDescriptionCWE
pagelayer_header_codequery paramwp-cron.php?is_pagelayer_editor=1&pagelayer_header_code=</textarea><script>alert(1);</script>Unauthenticated attacker can inject header/footer code via pagelayer_header_code in wp-cron.php for scheduled posts.

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 06:38Current
6.4Medium risk
Vulners AI Score6.4
CVSS 3.16.1
EPSS0.00455
SSVC
98