CVE-2020-36383

PageLayer before 1.3.5 allows reflected XSS via the font-size parameter...

CVE-2020-36383

PageLayer before 1.3.5 allows reflected XSS via the font-size parameter...

CVE-2020-36383

The CVE-2020-36383 issue affects the WordPress PageLayer plugin (up to version 1.3.4). The root cause is a reflected XSS via the font-size parameter, exploitable in affected PageLayer versions prior to 1.3.5. The exploitation vector is web-based input reflected in the page, enabling an attacker t...