Beveiligingsadvies

CVE-2024-8426

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-05-15 20:07:15
Laatst bijgewerkt 2025-05-17 03:14:31
Toegewezen door WPScan
CVSS-score 4.8
Status PUBLISHED

Beschrijving

The Page Builder: Pagelayer WordPress plugin before 1.8.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed