CVE-2020-35947: XSS
An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. Nearly all of the AJAX action endpoints lacked permission checks, allowing these actions to be executed by anyone authenticated on the site. This happened because nonces were used as a means of authorization, but a nonce was present in a publicly viewable page. The greatest impact was the pagelayersavecontent function that allowed pages to be modified and allowed XSS to occur.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for the PageLayer plugin issue?
The vulnerability ID for the PageLayer plugin issue is CVE-2020-35947.
What is the severity rating of CVE-2020-35947?
CVE-2020-35947 has a severity rating of 7.4 (high).
What software versions are affected by CVE-2020-35947?
The PageLayer plugin versions up to and excluding 1.1.2 for WordPress are affected by CVE-2020-35947.
How can the vulnerability in the PageLayer plugin be exploited?
The vulnerability in the PageLayer plugin can be exploited by executing unauthorized AJAX actions on the affected site.
Are there any references for more information about CVE-2020-35947?
Yes, you can find more information about CVE-2020-35947 at the following references: [Wordfence Blog](https://www.wordfence.com/blog/2020/05/high-severity-vulnerabilities-in-pagelayer-plugin-affect-over-200000-wordpress-sites/) and [WPScan](https://wpscan.com/vulnerability/10239).