Lucene search
+L

3 matches found

attackerkb
attackerkb
•added 2022/04/11 3:15 p.m.•22 views

CVE-2022-0314

The Nimble Page Builder WordPress plugin before 3.2.2 does not sanitise and escape the preview-level-guid parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.3AI score0.008EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/11 12:00 a.m.•3 views

CVE-2022-0314: Improper Neutralization of Input During Web Page Generation

The Nimble Page Builder WordPress plugin before 3.2.2 does not sanitise and escape the preview-level-guid parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.4AI score0.008EPSS
SaveExploits2References2
WPVulnDB
WPVulnDB
•added 2022/03/29 12:00 a.m.•36 views

Nimble Page Builder < 3.2.2 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape the preview-level-guid parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting PoC v 3.1.32 v 3.2.2...

6.1CVSS1.1AI score0.008EPSS
SaveExploits2Affected Software1
Rows per page
Query Builder