CVE-2023-47786

WordPress LayerSlider Plugin <= 7.7.9 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LayerSlider plugin <= 7.7.9 versions.


We have discovered 253,831 live websites that are affected by CVE-2023-47786.

Test my site




Affected Software

Product  LayerSlider
Category Widgets
Vulnerable Domains253,831 live websites (78.54% of LayerSlider install base)
Vulnerable Versions
  • from 0 through 7.7.9
Vulnerable Versions Count129 versions ( 79.63% of all versions)


Common Weakness Enumeration

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')



Details

  • Published - Nov 22, 2023
  • Updated - Aug 2, 2024

Credits

  • Rafie Muhammad (Patchstack) (finder)

CVE-2023-47786 usage by Country

United States81,614 websites



Germany34,044 websites
France18,414 websites
GB9,775 websites
Italy9,486 websites
Spain9,162 websites
Netherlands8,244 websites
Poland5,667 websites
Australia4,683 websites
Brazil4,245 websites

CVE-2023-47786 usage by TLD

.com106,011 websites
.de17,357 websites
.org10,047 websites
.it7,870 websites
.nl7,852 websites
.co.uk7,421 websites
.fr6,106 websites
.com.au5,463 websites
.com.br5,192 websites
.net5,009 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2023-47786

Top websites that are affected by CVE-2023-47786. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
**********.com United States*,***
*************.com United States*,***
******************.cat Spain*,***
************.org Turkey**,***
*******.com Portugal**,***
*******.com United States**,***
**********.***.tw Singapore**,***
*************.***.pk GB**,***
*********************.com Cyprus**,***
******.ch Switzerland**,***
See full domain list

FAQ

CVE-2023-47786 is Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in LayerSlider
A total of 253,831 websites have been identified as vulnerable to CVE-2023-47786, discovered through global website indexing conducted by WebTechSurvey.
LayerSlider is susceptible to CVE-2023-47786 vulnerability.
LayerSlider versions before, and including, 7.7.9 are vulnerable to CVE-2023-47786.