CVE-2024-2127

CVE-2024-2127 affects Page Builder: Pagelayer (WordPress plugin) up to version 1.8.3. The issue is stored Cross-Site Scripting via custom attributes caused by insufficient input sanitization and output escaping, enabling authenticated attackers with contributor+ permissions to inject scripts into...

WordPress PageLayer Plugin <= 1.8.3 is vulnerable to Cross Site Scripting (XSS)

Software PageLayer Type Plugin Vulnerable versions = 1.8.3 Fixed in 1.8.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2127 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0658bd2623bb Credits wesley wcraft Required privile...