Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hpcp-jfj7-rjww

Опубликовано: 29 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.8

Описание

The Page Builder: Pagelayer WordPress plugin before 1.8.0 doesn't prevent attackers with administrator privileges from inserting malicious JavaScript inside a post's header or footer code, even when unfiltered_html is disallowed, such as in multi-site WordPress configurations.

The Page Builder: Pagelayer WordPress plugin before 1.8.0 doesn't prevent attackers with administrator privileges from inserting malicious JavaScript inside a post's header or footer code, even when unfiltered_html is disallowed, such as in multi-site WordPress configurations.

EPSS

Процентиль: 33%
0.00126
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
около 2 лет назад

The Page Builder: Pagelayer WordPress plugin before 1.8.0 doesn't prevent attackers with administrator privileges from inserting malicious JavaScript inside a post's header or footer code, even when unfiltered_html is disallowed, such as in multi-site WordPress configurations.

EPSS

Процентиль: 33%
0.00126
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79