Cross-Site Scripting Vulnerability in Nested Pages by Kyle Phillips

CVE-2025-24579

What is CVE-2025-24579?

A Cross-Site Scripting (XSS) vulnerability has been identified in the Nested Pages plugin developed by Kyle Phillips. This vulnerability arises from improper handling of user input during web page generation, allowing attackers to inject malicious scripts. As a result, arbitrary JavaScript code could be executed when users interact with affected pages, leading to potential data theft or unauthorized actions carried out on behalf of the user. The vulnerability impacts all versions of Nested Pages up to 3.2.9, underscoring the critical need for users to update their installations to safeguard against such exploits.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References