CVE-2020-35944 - An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress

Back Back to CVE browser

HIGH

An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress

Published Jan 1, 2021

8.8

HIGH

CVSS 3.1

EPSS 0.78%

Description

An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. The pagelayer_settings_page function is vulnerable to CSRF, which can lead to XSS.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-352

CSRF

CWE-79

Cross-site Scripting (XSS)

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-23527
Advisory
https://wpscan.com/vulnerability/10240
x_refsource_MISCExploitThird Party Advisory
https://www.wordfence.com/blog/2020/05/high-severity-vulnerabilities-in-pagelayer-plugin-affect-over-200000-wordpress-sites/
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-23527		Advisory
https://wpscan.com/vulnerability/10240		x_refsource_MISCExploitThird Party Advisory
https://www.wordfence.com/blog/2020/05/high-severity-vulnerabilities-in-pagelayer-plugin-affect-over-200000-wordpress-sites/		x_refsource_MISCExploitThird Party Advisory