mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-29 09:41:05 +00:00
839 B
839 B
CVE-2022-0314
Description
The Nimble Page Builder WordPress plugin before 3.2.2 does not sanitise and escape the preview-level-guid parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
POC
Reference
- https://wpscan.com/vulnerability/17585f16-c62c-422d-ad9c-9138b6da97b7
- https://wpscan.com/vulnerability/17585f16-c62c-422d-ad9c-9138b6da97b7