CVE-2022-3610

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

The Jeeng Push Notifications WordPress plugin before 2.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Affected software

No affected versions have been published.

Timeline

Published
Nov 28, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-361008.8XWiki Platform Applications Tag and XWiki Platform Tag UI are tag applications for XWiki, a generic wiki platform. Starting with version 1.7CVE-2022-361015.3Shopware is an open source e-commerce software. In affected versions the request for the customer detail view in the backend administration CVE-2022-361027.2Shopware is an open source e-commerce software. In affected versions if backend admin controllers are called with a certain notation, the ACCVE-2022-361038.8Talos Linux is a Linux distribution built for Kubernetes deployments. Talos worker nodes use a join token to get accepted into the Talos cluCVE-2022-361047.5TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions requesting invalid or non-eCVE-2022-361055.3TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that observing response tCVE-2022-361065.4TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the expiration time CVE-2022-361075.4TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the `FileDumpControlCVE-2022-361086.1TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the `f:asset.css` viCVE-2022-361096.3Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where supplemeCVE-2022-36117.5An information disclosure vulnerability has been identified in the Lenovo App Store which may allow some applications to gain unauthorized aCVE-2022-361108.8Netmaker makes networks with WireGuard. Prior to version 0.15.1, Improper Authorization functions lead to non-privileged users running privi