Read the docs

presscustomizr

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

presscustomizr records in CISA KEV

No presscustomizr vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Customizr 2 records LOW Hueman 2 records LOW Hueman Addons 1 record MEDIUM Nimble Page Builder 1 record LOW

Records

1 record in Nimble Page Builder · all components

TI-2022-00243 CVE-2022-0314 · GHSA-r4qm-jcjp-x8c6

Nimble Page Builder < 3.2.2 - Reflected Cross-Site Scripting

Priority LOW 29

The Nimble Page Builder WordPress plugin before 3.2.2 does not sanitise and escape the preview-level-guid parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-04-11 Fixed in 3.2.2 CWE-79
Open these records in search →