AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-0209

MEDIUM · CVSS 4.8 EPSS 0.58%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-06-13 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2022-0209
Severity
MEDIUM
CVSS
4.8
EPSS
0.58%
WordPress

Original NVD Description

The Mitsol Social Post Feed WordPress plugin before 1.11 does not escape some of its settings before outputting them back in attributes, which could allow high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed