CVE-2022-30545

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

Auth. Reflected Cross-Site Scripting (XSS) vulnerability in 5 Anker Connect plugin <= 1.2.6 on WordPress.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Nov 8, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-305467.8Out-of-bounds read vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which maCVE-2022-305479.9A directory traversal vulnerability exists in the unzipDirectory functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specialCVE-2022-305487.8Uncontrolled search path element in the Intel(R) Glorp software may allow an authenticated user to potentially enable escalation of privilegCVE-2022-305497.8Out-of-bounds read vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attackCVE-2022-30558.8Use after free in Passwords in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI CVE-2022-305508.8An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entries exist with the samCVE-2022-305517.5OPC UA Legacy Java Stack 2022-04-01 allows a remote attacker to cause a server to stop processing messages by sending crafted messages that CVE-2022-305525.5Das U-Boot 2022.01 has a Buffer Overflow.CVE-2022-305567.5Apache HTTP Server 2.4.53 and earlier may return lengths to applications calling r:wsread() that point past the end of the storage allocatedCVE-2022-305577.5Foxit PDF Reader and PDF Editor before 11.2.2 have a Type Confusion issue that causes a crash because of Unsigned32 mishandling during JavaSCVE-2022-30566.5Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to bypass conteCVE-2022-305607.4When an attacker obtaining the administrative account and password, or through a man-in-the-middle attack, the attacker could send a specifi
CVE-2022-30545: Medium severity, CVSS 4.8 | Vulnix