1 matches found
CVE-2026-15233: Improper Neutralization of Input During Web Page Generation
The Nested Pages WordPress plugin before 3.2.15 does not properly escape post titles before outputting them into HTML attributes on an administrative listing screen, allowing users with the Editor role or Contributor/Author when the Nested Pages WordPress plugin before 3.2.15 is enabled for the...
4.8CVSS5.9AI score0.00242EPSS
SaveExploits0References2
20