CVE-2022-1717

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

The Custom Share Buttons with Floating Sidebar WordPress plugin before 4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Jun 20, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-17187.5The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to ca CVE-2022-17195.4Reflected XSS on ticket filter function in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability is capable of executing a ma CVE-2022-17207.8Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the so CVE-2022-17217.5Path Traversal in WellKnownServlet in GitHub repository jgraph/drawio prior to 18.0.5. Read local files of the web application.CVE-2022-17223.3SSRF in editor's proxy via IPv6 link-local address in GitHub repository jgraph/drawio prior to 18.0.5. SSRF to internal link-local IPv6 addr CVE-2022-17237.5Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.6.CVE-2022-17246.1The Simple Membership WordPress plugin before 4.1.1 does not properly sanitise and escape parameters before outputting them back in AJAX act CVE-2022-17255.5NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959.CVE-2022-17265.4Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in GitHub repository wenzhixin/bootstra CVE-2022-17278.8Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6.CVE-2022-17286.5Allowing long password leads to denial of service in polonel/trudesk in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability CVE-2022-17297.0A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The