CVE-2022-4835

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

The Social Sharing Toolkit WordPress plugin through 2.6 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jan 30, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-483507.5The HUAWEI Messaging app has a vulnerability of unauthorized file access. Successful exploitation of this vulnerability may affect confidentCVE-2022-483517.5The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect availability.CVE-2022-483527.5Some smartphones have data initialization issues. Successful exploitation of this vulnerability may cause a system panic.CVE-2022-483539.8Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause kernel privilege escalation, which resulCVE-2022-483546.5The Bluetooth module has a heap out-of-bounds write vulnerability. Successful exploitation of this vulnerability can cause the Bluetooth proCVE-2022-483556.5The Bluetooth module has a heap out-of-bounds read vulnerability. Successful exploitation of this vulnerability can cause the Bluetooth procCVE-2022-483567.5The facial recognition module has a vulnerability in input parameter verification. Successful exploitation of this vulnerability may cause fCVE-2022-483577.5Some products have the double fetch vulnerability. Successful exploitation of this vulnerability may cause denial of service (DoS) attacks tCVE-2022-483587.4The BatteryHealthActivity has a redirection vulnerability. Successful exploitation of this vulnerability by a malicious app can cause servicCVE-2022-483597.5The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of this vulnerability mayCVE-2022-48365.4The Breadcrumb WordPress plugin before 1.5.33 does not validate and escape some of its shortcode attributes before outputting them back in tCVE-2022-483607.5The facial recognition module has a vulnerability in file permission control. Successful exploitation of this vulnerability may affect confi
CVE-2022-4835: Medium severity, CVSS 5.4 | Vulnix