The Page Builder: Pagelayer WordPress plugin before 1.7.8 doesn't prevent attackers with author privileges and higher from inserting malicious JavaScript inside a post's header or footer code...
5.4CVSS5.8AI score0.00415EPSS
SaveExploits2References1
Prion•added 2023/10/16 8:15 p.m.•25 views
Code injection
The Page Builder: Pagelayer WordPress plugin before 1.7.7 doesn't prevent unauthenticated attackers from updating a post's header or footer code on scheduled posts...
