CVE-2022-0428

CVE-2022-0428: Content Egg < 5.3.0 - Reflected Cross-Site Scripting

Vendor Unknown

Product Content Egg

Weakness CWE-79 · XSS

Published May 2, 2022

Last update August 2, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Content Egg WordPress plugin before 5.3.0 does not sanitise and escape the page parameter before outputting back in an attribute in the Autoblogging admin dashboard, leading to a Reflected Cross-Site Scripting

Key dates

02Disclosure timeline

May 2, 2022 CVE published

August 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-0428 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2024-51871 WordPress Luzuk Team plugin <= 0.1.0 - Cross Site Scripting (XSS) vulnerability CVE-2025-60104 WordPress Gallery Custom Links Plugin <= 2.2.5 - Cross Site Scripting (XSS) Vulnerability CVE-2021-39318 H5P CSS Editor <= 1.0 Reflected Cross-Site Scripting CVE-2025-58875 WordPress WP Github Gist Plugin <= 0.5 - Cross Site Scripting (XSS) Vulnerability CVE-2021-3052 PAN-OS: Reflected Cross-Site Scripting (XSS) in Web Interface