CVE-2023-6738: PageLayer <= 1.7.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via meta fields
The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pagelayerheadercode', 'pagelayerbodyopencode', and 'pagelayerfootercode' meta fields in all versions up to, and including, 1.7.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This appears to be a reintroduction of a vulnerability patched in version 1.7.7.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-6738?
CVE-2023-6738 is classified as a high severity vulnerability due to its potential to allow stored Cross-Site Scripting.
How do I fix CVE-2023-6738?
To mitigate CVE-2023-6738, users should update the Pagelayer plugin to version 1.7.9 or higher.
Which versions of Pagelayer are affected by CVE-2023-6738?
CVE-2023-6738 affects all versions of the Pagelayer plugin up to and including version 1.7.8.
What type of vulnerability is CVE-2023-6738?
CVE-2023-6738 is a Stored Cross-Site Scripting (XSS) vulnerability.
What are the specific fields involved in CVE-2023-6738?
The fields involved in CVE-2023-6738 are 'pagelayer_header_code', 'pagelayer_body_open_code', and 'pagelayer_footer_code' meta fields.