CVE-2022-1990

2022-06-2709:15:10

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

JSON

The Nested Pages WordPress plugin before 3.1.21 does not escape and sanitize the some of its settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfiltered_html is disallowed

CPENameOperatorVersion
wp-nested-pageseq1.3.6
wp-nested-pageseq1.6.1
wp-nested-pageseq1.6.8
wp-nested-pageseq1.3.0
wp-nested-pageseq1.3.12
wp-nested-pageseq1.6.2
wp-nested-pageseq3.0.1
wp-nested-pageseq3.0.8
wp-nested-pageseq3.1.19
wp-nested-pageseq1.5.0

Name	Operator	Version
wp-nested-pages	eq	1.3.6
wp-nested-pages	eq	1.6.1
wp-nested-pages	eq	1.6.8
wp-nested-pages	eq	1.3.0
wp-nested-pages	eq	1.3.12
wp-nested-pages	eq	1.6.2
wp-nested-pages	eq	3.0.1
wp-nested-pages	eq	3.0.8
wp-nested-pages	eq	3.1.19
wp-nested-pages	eq	1.5.0