CVE-2023-7115

The CVE-2023-7115 entry concerns the Page Builder: Pagelayer WordPress plugin, specifically versions prior to 1.8.1. The underlying issue is inadequate sanitising and escaping of certain settings, enabling stored Cross-Site Scripting if an attacker has high privileges (e.g., Administrator) and, i...

WordPress PageLayer Plugin < 1.8.1 is vulnerable to Cross Site Scripting (XSS)

Software PageLayer Type Plugin Vulnerable versions 1.8.1 Fixed in 1.8.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-7115 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID e7001c2ee296 Credits websafe2021 Required privilege...