CVE-2022-0590

CVE-2022-0590: BulletProof Security < 5.8 - Admin+ Stored Cross-Site Scripting (XSS)

Vendor Unknown
Product BulletProof Security
Weakness CWE-79 · XSS
Published March 21, 2022
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The BulletProof Security WordPress plugin before 5.8 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Key dates

02Disclosure timeline

March 21, 2022 CVE published
August 2, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-9859 Fintelligence Calculator <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-46734 Symfony potential Cross-site Scripting vulnerabilities in CodeExtension filters CVE-2023-0322 XSS in Talent Software UNIS CVE-2026-3617 Paypal Shortcodes <= 0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'amount' and 'name' Shortcode Attributes CVE-2024-10647 WS Form LITE – Drag & Drop Contact Form Builder for WordPress <= 1.9.244 - Reflected Cross-Site Scripting via URL