CVE-2023-49195

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources

Severity

4.8MEDIUM

EPSS

0.1%

top 66.85%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Kyle Phillips Nested Pages Kylephillips Nested Pages

Timeline

PublishedDec 14

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kyle Phillips Nested Pages allows Stored XSS.This issue affects Nested Pages: from n/a through 3.2.6.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:LExploitability: 1.7 | Impact: 3.7

Affected Packages2 packages

▶NVDkylephillips/nested_pages3.2.6

▶CVEListV5kyle_phillips/nested_pagesn/a — 3.2.6

🔴Vulnerability Details

CVEList

WordPress Nested Pages Plugin <= 3.2.6 is vulnerable to Cross Site Scripting (XSS)↗2023-12-14

▶

GHSA

GHSA-3vrq-rxrv-8pfv: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kyle Phillips Nested Pages allows Stored XSS↗2023-12-14

▶