CVE Database /
CVE-2023-4687
CVE · Medium
CVE-2023-4687 — Page Builder: Pagelayer – Drag and Drop website builder [pagelayer] < 1.7.7
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-4687
|
Page Builder: Pagelayer – Drag and Drop website builder [pagelayer] < 1.7.7 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.1
|
< 1.7.7
|
1.7.7 |
2023-09-25 |
—
|
CVE-2023-4687
The Pagelayer page builder plugin before version 1.7.7 contains a cross-site scripting vulnerability that an attacker could exploit to inject harmful scripts into a website. When visitors access the compromised site, these injected scripts would execute in their browsers, potentially redirecting users, displaying unwanted advertisements, or delivering other malicious HTML payloads. The flaw was discovered and reported by Marc Montpas and has been patched in version 1.7.7 or later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings