CVE Database /
CVE-2024-1590
CVE · Medium
CVE-2024-1590 — Page Builder: Pagelayer – Drag and Drop website builder [pagelayer] < 1.8.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-1590
|
Page Builder: Pagelayer – Drag and Drop website builder [pagelayer] < 1.8.3 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 1.8.3
|
1.8.3 |
2024-02-22 |
—
|
CVE-2024-1590
The Pagelayer page builder plugin before version 1.8.3 contains a cross-site scripting vulnerability that could enable attackers to inject malicious scripts into affected websites. When visitors access the site, these injected scripts would execute and could redirect users, display unwanted advertisements, or deliver other harmful content. The flaw was identified by wesley (wcraft) and has been resolved in version 1.8.3, which users should upgrade to immediately.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings