Description
The Nested Pages WordPress plugin before 3.1.21 does not escape and sanitize the some of its settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfiltered_html is disallowed
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Nested Pages | 3.1.21 – < 3.1.21 | 3.1.21 |