CVE-2022-0314

The Nimble Page Builder WordPress plugin before 3.2.2 does not sanitise and escape the preview-level-guid parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

Score

CVSS 3.1 6.1 Medium

Status

Modified - contact@wpscan.com

Published

2022-04-11

Last modified

2024-08-02

Weaknesses

CWE-79

Affected products

• Nimble Page Builder (Presscustomizr)
• Nimble Page Builder (Unknown)

References

• https://wpscan.com/vulnerability/17585f16-c62c-422d-ad9c-9138b6da97b7