4.7
Medium
CVE-2021-38343 The Nested Pages WordPress…
Description
The Nested Pages WordPress plugin <= 3.1.15 was vulnerable to an Open Redirect via the `page` POST parameter in the `npBulkActions`, `npBulkEdit`, `npListingSort`, and `npCategoryFilter` `admin_post` actions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Nested Pages | 3.1.15 | No fix stated |
Other CVEs of Nested Pages
The 4 CVEs of Nested Pages →
CVE-2025-24579
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kyle Phillips…
5.9
Medium
CVE-2023-49195
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kyle Phillips…
5.9
Medium
CVE-2021-38342
The Nested Pages WordPress…
8.1
High