CVE-2022-37412

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

Authenticated (admin+) Reflected Cross-Site Scripting (XSS) vulnerability in Galerio & Urda's Better Delete Revision plugin <= 1.6.1 at WordPress.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Galerio & Urda	Better Delete Revision (WordPress plugin)	>= <= 1.6.1, <= 1.6.1

References

https://patchstack.com/database/vulnerability/better-delete-revision/wordpress-better-delete-revision-plugin-1-6-1-authenticated-reflected-cross-site-scripting-xss-vulnerability/_s_id=cveThird Party Advisory
https://wordpress.org/plugins/better-delete-revision/Product, Release Notes
https://patchstack.com/database/vulnerability/better-delete-revision/wordpress-better-delete-revision-plugin-1-6-1-authenticated-reflected-cross-site-scripting-xss-vulnerability/_s_id=cveThird Party Advisory
https://wordpress.org/plugins/better-delete-revision/Product, Release Notes

Timeline

Published: Sep 9, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-374157.8The Uniwill SparkIO.sys driver 1.0 is vulnerable to a stack-based buffer overflow via IOCTL 0x40002008.CVE-2022-374166.5Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2_mc_fullx_fully_8x8.CVE-2022-374186.4The Remote Keyless Entry (RKE) receiving unit on certain Nissan, Kia, and Hyundai vehicles through 2017 allows remote attackers to perform u CVE-2022-37426.7A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevat CVE-2022-374215.4Silverstripe silverstripe/cms through 4.11.0 allows XSS.CVE-2022-374227.5Payara through 5.2022.2 allows directory traversal without authentication. This affects Payara Server, Payara Micro, and Payara Server Embed CVE-2022-374237.5Neo4j APOC (Awesome Procedures on Cypher) before 4.3.0.7 and 4.x before 4.4.0.8 allows Directory Traversal to sibling directories via apoc.l CVE-2022-374246.5Files or Directories Accessible to External Parties vulnerability in OpenNebula on Linux allows File Discovery.CVE-2022-374259.8Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in OpenNebula OpenNebula core on Linux all CVE-2022-374267.5Unrestricted Upload of File with Dangerous Type vulnerability in OpenNebula OpenNebula core on Linux allows File Content Injection.CVE-2022-374286.5PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception CVE-2022-374295.4Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 2) via JavaScript payload to the href attribute of a link by splitti