CVE-2022-2567

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

The Form Builder CP WordPress plugin before 1.2.32 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Sep 19, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-256707.5Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit CVE-2022-256717.5Denial of service in MODEM due to reachable assertion in Snapdragon Mobile CVE-2022-256727.5Denial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon Mobile CVE-2022-256737.5Denial of service in MODEM due to reachable assertion while processing configuration from network in Snapdragon Mobile CVE-2022-256749.8Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, CVE-2022-256755.5Denial of service due to reachable assertion in modem while processing filter rule from application client in Snapdragon Compute, Snapdragon CVE-2022-256765.5Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer CVE-2022-256777.8Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,CVE-2022-256789.8Memory correction in modem due to buffer overwrite during coap connection CVE-2022-256795.5Denial of service in video due to improper access control in broadcast receivers in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon CVE-2022-25686.5A privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a remote authenticated user with 'change user' pe CVE-2022-256807.8Memory corruption in multimedia due to buffer overflow while processing count variable from client in Snapdragon Auto