CVE-2022-2169

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

The Loading Page with Loading Screen WordPress plugin before 1.0.83 does not escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Jul 17, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-216905.4OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor net CVE-2022-216914.3OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor net CVE-2022-216924.3OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor net CVE-2022-216936.5OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor net CVE-2022-216945.3OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor net CVE-2022-216955.3OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor net CVE-2022-216964.3OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor net CVE-2022-216977.1Jupyter Server Proxy is a Jupyter notebook server extension to proxy web services. Versions of Jupyter Server Proxy prior to 3.2.1 are vulne CVE-2022-216987.5client_golang is the instrumentation library for Go applications in Prometheus, and the promhttp package in client_golang provides tooling a CVE-2022-216998.8IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Py CVE-2022-21704.8The Microsoft Advertising Universal Event Tracking (UET) WordPress plugin before 1.0.4 does not sanitise and escape its settings, allowing h CVE-2022-217005.3Micronaut is a JVM-based, full stack Java framework designed for building JVM web applications with support for Java, Kotlin and the Groovy