Skip to content
OpenAdvisories
Medium · 4.7 CVE-2021-38343 EUVD-2021-24796GHSA-wg24-7m7r-fcx2

Nested Pages <= 3.1.15 Open Redirect

Published Aug 30, 2021 · Updated Sep 17, 2024 · Assigned by Wordfence

Description

The Nested Pages WordPress plugin <= 3.1.15 was vulnerable to an Open Redirect via the `page` POST parameter in the `npBulkActions`, `npBulkEdit`, `npListingSort`, and `npCategoryFilter` `admin_post` actions.

Affected products

VendorProductAffectedFixed
Kyle Phillips Nested Pages 3.1.15 – ≤ 3.1.15 —

References