Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-56560
HistoryJun 30, 2022 - 12:00 a.m.

WordPress Nested Pages plugin跨站脚本漏洞

2022-06-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
13

0.001 Low

EPSS

Percentile

24.8%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Nested Pages plugin version prior to 3.1.21 has a cross-site scripting vulnerability that stems from the plugin not escaping and cleaning up some of its settings, which can be exploited by a highly privileged attacker such as an administrator to The vulnerability can be exploited to execute JavaScript code on the client side.

CPENameOperatorVersion
wordpress nested pages pluginlt3.1.21

0.001 Low

EPSS

Percentile

24.8%