CVE-2020-36383: XSS
Published Jun 7, 2021
·Updated
PageLayer before 1.3.5 allows reflected XSS via the font-size parameter.
Affected Software
1 affected component
PageLayer Pagelayer WordPress<1.3.5
Event History
Jun 7, 2021
CVE Published
via MITRE·10:19 AM
Data Sourced
via MITRE·10:19 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2020-36383.
2
What is the title of the vulnerability?
The title of the vulnerability is 'PageLayer before 1.3.5 allows reflected XSS via the font-size parameter.'
3
How does the vulnerability occur?
The vulnerability occurs when an attacker is able to inject malicious code into the font-size parameter of the PageLayer plugin.
4
What is the severity of CVE-2020-36383?
The severity of CVE-2020-36383 is medium.
5
How can I fix CVE-2020-36383?
To fix CVE-2020-36383, update your PageLayer plugin to version 1.3.5 or later.