CVE Database /
CVE-2023-5124
CVE · Medium
CVE-2023-5124 — Page Builder: Pagelayer – Drag and Drop website builder [pagelayer] < 1.8.0
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-5124
|
Page Builder: Pagelayer – Drag and Drop website builder [pagelayer] < 1.8.0 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
4.8
|
< 1.8.0
|
1.8.0 |
2024-01-29 |
—
|
CVE-2023-5124
The Pagelayer page builder plugin before version 1.8.0 contains a cross-site scripting vulnerability discovered by Marc Montpas that enables attackers to inject malicious scripts into websites. An attacker could exploit this flaw to execute arbitrary code such as redirects, advertisements, and custom HTML content that runs when site visitors access the affected pages. The vulnerability was addressed in version 1.8.0, so users should upgrade to this version or later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings