CVE-2023-5087

The Page Builder: Pagelayer WordPress plugin before 1.7.8 doesn't prevent attackers with author privileges and higher from inserting malicious JavaScript inside a post's header or footer code.

Score

CVSS 3.1 5.4 Medium

Status

Modified - contact@wpscan.com

Published

2023-10-16

Last modified

2025-04-23

Affected products

• Pagelayer (Pagelayer)
• Page Builder Pagelayer (Unknown)

References

• https://wpscan.com/vulnerability/3b45cc0b-7378-49f3-900e-d0e18cd4b878