CVE-2023-6738: Input Validation
First published: Thu Jan 04 2024(Updated: )
The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pagelayer_header_code', 'pagelayer_body_open_code', and 'pagelayer_footer_code' meta fields in all versions up to, and including, 1.7.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This appears to be a reintroduction of a vulnerability patched in version 1.7.7.
Credit: security@wordfence.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Pagelayer | <=1.7.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.wordfence.com/threat-intel/vulnerabilities/id/d14c8890-482c-4d43-a68f-0d04c4feca8f?source=cve
- https://plugins.trac.wordpress.org/browser/pagelayer/trunk/main/post_metas.php#L527
- https://plugins.trac.wordpress.org/changeset?old_path=/pagelayer/tags/1.7.8&old=3016486&new_path=/pagelayer/tags/1.7.9&new=3016486&sfp_email=&sfph_mail=
Frequently Asked Questions
What is the severity of CVE-2023-6738?
CVE-2023-6738 is classified as a high severity vulnerability due to its potential to allow stored Cross-Site Scripting.
How do I fix CVE-2023-6738?
To mitigate CVE-2023-6738, users should update the Pagelayer plugin to version 1.7.9 or higher.
Which versions of Pagelayer are affected by CVE-2023-6738?
CVE-2023-6738 affects all versions of the Pagelayer plugin up to and including version 1.7.8.
What type of vulnerability is CVE-2023-6738?
CVE-2023-6738 is a Stored Cross-Site Scripting (XSS) vulnerability.
What are the specific fields involved in CVE-2023-6738?
The fields involved in CVE-2023-6738 are 'pagelayer_header_code', 'pagelayer_body_open_code', and 'pagelayer_footer_code' meta fields.
- agent/type
- agent/event
- agent/first-publish-date
- agent/remedy
- agent/severity
- agent/weakness
- agent/author
- agent/references
- agent/softwarecombine
- agent/description
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/pagelayer
- canonical/pagelayer
- version/pagelayer/1.7.8