CVE-2022-2093

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

The WP Duplicate Page WordPress plugin before 1.3 does not sanitize and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Unknown	WP Duplicate Page	>= 1.3, < 1.3

References

https://wpscan.com/vulnerability/a11628e4-f47b-42d8-9c09-7536d49fce4cExploit, Third Party Advisory
https://wpscan.com/vulnerability/a11628e4-f47b-42d8-9c09-7536d49fce4cExploit, Third Party Advisory

Timeline

Published: Jul 11, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-209306.7A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite and possibly corrupt files on CVE-2022-209316.5A vulnerability in the version control of Cisco TelePresence CE Software for Cisco Touch 10 Devices could allow an unauthenticated CVE-2022-209324.8Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authentica CVE-2022-209338.6A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z3 Teleworker Gateway devices could allow an unauthen CVE-2022-209346.7A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software and Cisco FXOS Software could allow an authenticated, local atta CVE-2022-209354.8Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authentica CVE-2022-209364.8Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authentica CVE-2022-209375.3A vulnerability in a feature that monitors RADIUS requests on Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, CVE-2022-209384.3A vulnerability in the module import function of the administrative interface of Cisco Firepower Management Center (FMC) Software could allo CVE-2022-209394.3A vulnerability in the web-based management interface of Cisco Smart Software Manager On-Prem could allow an authenticated, remote atta CVE-2022-20946.1The Yellow Yard Searchbar WordPress plugin before 2.8.2 does not escape some URL parameters before outputting them back to the user, leading CVE-2022-209405.3A vulnerability in the TLS handler of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to gain