CVE-2022-0619

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

The Database Peek WordPress plugin through 1.2 does not sanitize and escape the match parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Mar 28, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-06206.1The Delete Old Orders WordPress plugin through 0.2 does not sanitize and escape the date parameter before outputting it back in an admin pag CVE-2022-06216.1The dTabs WordPress plugin through 1.4 does not sanitize and escape the tab parameter before outputting it back in an admin page, leading to CVE-2022-06225.3Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11.CVE-2022-06239.1Out-of-bounds Read in Homebrew mruby prior to 3.2.CVE-2022-06247.3Authorization Bypass Through User-Controlled Key in GitHub repository ionicabizau/parse-path prior to 5.0.0.CVE-2022-06256.1The Admin Menu Editor WordPress plugin through 1.0.4 does not sanitize and escape a parameter before outputting it back in an admin page, le CVE-2022-06266.1The Advanced Admin Search WordPress plugin before 1.1.6 does not sanitize and escape some parameters before outputting them back in an admin CVE-2022-06276.1The Amelia WordPress plugin before 1.0.47 does not sanitize and escape the code parameter before outputting it back in an admin page, leadin CVE-2022-06286.1The Mega Menu WordPress plugin before 3.0.8 does not sanitize and escape the _wpnonce parameter before outputting it back in an admin page, CVE-2022-06297.8Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-06307.1Out-of-bounds Read in Homebrew mruby prior to 3.2.CVE-2022-06319.8Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.