Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2024/02/27 8:30 a.m.28 views

CVE-2023-7115 PageLayer < 1.8.1 - Admin+ Stored XSS

The Page Builder: Pagelayer WordPress plugin before 1.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.6AI score0.00402EPSS
SaveExploits2References1
Rows per page
Query Builder