AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-4142

MEDIUM · CVSS 4.8 EPSS 0.47%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-01-02 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.8. It affects WordPress, Java.

CVE
CVE-2022-4142
Severity
MEDIUM
CVSS
4.8
EPSS
0.47%
WordPress Java

Original NVD Description

The WordPress Filter Gallery Plugin WordPress plugin before 0.1.6 does not properly escape the filters passed in the ufg_gallery_filters ajax action before outputting them on the page, allowing a high privileged user such as an administrator to inject HTML or javascript to the plugin settings page, even when the unfiltered_html capability is disabled.