Lucene search

K
wpvulndbChloe ChamberlandWPVDB-ID:E0BF6D19-D6A4-4945-8454-950419F1EFDD
HistoryMay 28, 2020 - 12:00 a.m.

Page Builder: PageLayer - Drag and Drop website builder < 1.1.2 - CSRF leading to XSS

2020-05-2800:00:00
Chloe Chamberland
wpscan.com
10

A flaw allowed attackers to forge a request on behalf of a site’s administrator to modify the settings of the plugin which could allow for malicious Javascript injection.

PoC

CPENameOperatorVersion
pagelayerlt1.1.2
Related for WPVDB-ID:E0BF6D19-D6A4-4945-8454-950419F1EFDD