CVE-2022-4114

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

The Superio WordPress theme does not sanitise and escape some parameters, which could allow users with a role as low as a subscriber to perform Cross-Site Scripting attacks.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Affected software

VendorProductVersions
UnknownSuperio< 1.2.33

References

Timeline

Published
Jan 2, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-411408.8This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple D-Link routers. AuthentCVE-2022-411417.8This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the CVE-2022-411428.8This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploCVE-2022-411437.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reCVE-2022-411447.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reCVE-2022-411455.5This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interactiCVE-2022-411465.5This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interactiCVE-2022-411477.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reCVE-2022-411487.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reCVE-2022-411497.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reCVE-2022-41155.4The Editorial Calendar WordPress plugin before 3.8.3 does not sanitise and escape its settings, allowing users with roles as low as contribuCVE-2022-411507.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is re
CVE-2022-4114: Medium severity, CVSS 5.4 | Vulnix