CVE-2022-22734

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

The Simple Quotation WordPress plugin through 1.3.2 does not have CSRF check when creating or editing a quote and does not sanitise and escape Quotes. As a result, attacker could make a logged in admin create or edit arbitrary quote, and put Cross-Site Scripting payloads in them

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-116

Affected software

No affected versions have been published.

Timeline

Published: Mar 14, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-227358.8The Simple Quotation WordPress plugin through 1.3.2 does not have authorisation (and CSRF) checks in various of its AJAX actions and is lack CVE-2022-227367.0If Firefox was installed to a world-writable directory, a local privilege escalation could occur when Firefox searched the current directory CVE-2022-227377.5Constructing audio sinks could have lead to a race condition when playing audio files and closing windows. This could have lead to a use-aft CVE-2022-227388.8Applying a CSS filter effect could have accessed out of bounds memory. This could have lead to a heap-buffer-overflow causing a potentially CVE-2022-227396.5Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol. This vulnerability affect CVE-2022-22749.8The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions. This is CVE-2022-227408.8Certain network request objects were freed too early when releasing a network request handle. This could have lead to a use-after-free causi CVE-2022-227417.5When resizing a popup while requesting fullscreen access, the popup would have become unable to leave fullscreen mode. This vulnerability af CVE-2022-227426.5When inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a potentially exploitable cra CVE-2022-227434.3When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the browser unable to l CVE-2022-227448.8The constructed curl command from the "Copy as curl" feature in DevTools was not properly escaped for PowerShell. This could have lead to co CVE-2022-227456.5Securitypolicyviolation events could have leaked cross-origin information for frame-ancestors violations. This vulnerability affects Firefox