CVE-2022-0314

CVE-2022-0314: Nimble Page Builder < 3.2.2 - Reflected Cross-Site Scripting

Vendor Unknown
Product Nimble Page Builder
Weakness CWE-79 · XSS
Published April 11, 2022
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Nimble Page Builder WordPress plugin before 3.2.2 does not sanitise and escape the preview-level-guid parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

Key dates

02Disclosure timeline

April 11, 2022 CVE published
August 2, 2024 Record updated