CVE-2020-36383

Impact

PageLayer before 1.3.5 allows reflected XSS via the font-size parameter.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://www.wordfence.com/blog/2020/12/reflected-xss-in-pagelayer-plugin-affects-over-200000-wordpress-sites/
• https://www.wordfence.com/blog/2020/12/reflected-xss-in-pagelayer-plugin-affects-over-200000-wordpress-sites/