← CVE Intelligence

CVE-2022-1990

Nested Pages < 3.1.21 - Admin+ Stored Cross Site Scripting PUBLISHED

Description (CNA)

The Nested Pages WordPress plugin before 3.1.21 does not escape and sanitize the some of its settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfiltered_html is disallowed

Affected (CNA)

Vendor / productVersions
Unknown / Nested Pagesaffected 3.1.21 before 3.1.21

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.