CVE-2024-8759

The Nested Pages WordPress plugin (versions prior to 3.2.9 ) is vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is the insufficient sanitization and escaping of certain plugin settings. This flaw allows high-privilege users, such as administrators, to execute stored XSS, ...

CVE-2025-0718

The Nested Pages WordPress plugin before 3.2.13 does not sanitise and escape some of its settings, which could allow high privilege users such as contributors to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2025-0718

The Nested Pages WordPress plugin before 3.2.13 does not sanitise and escape some of its settings, which could allow high privilege users such as contributors to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...