CVE-2022-2574

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

The Meks Easy Social Share WordPress plugin before 1.2.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Oct 17, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-257409.8Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface CVE-2022-257417.5Denial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Auto, Snapdragon Compu CVE-2022-257427.5Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IO CVE-2022-257437.8Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Conne CVE-2022-257459.8Memory corruption in modem due to improper input validation while handling the incoming CoAP message CVE-2022-257467.8Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping.CVE-2022-257477.5Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message CVE-2022-257489.8Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapd CVE-2022-257497.5Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Co CVE-2022-25754.8The WBW Currency Switcher for WooCommerce WordPress plugin before 1.6.6 does not sanitise and escape some of its settings, which could allow CVE-2022-257508.8Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile CVE-2022-257517.5A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X