CVE-2022-0620

CVE-2022-0620: Delete Old Orders <= 0.2 - Reflected Cross-Site Scripting

Vendor Unknown

Product Delete Old Orders

Weakness CWE-79 · XSS

Published March 28, 2022

Last update August 2, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Delete Old Orders WordPress plugin through 0.2 does not sanitize and escape the date parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.

Key dates

02Disclosure timeline

March 28, 2022 CVE published

August 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-0620 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2020-7571 CVE-2022-0248 Contact Form Submissions < 1.7.3 - Unauthenticated Stored XSS CVE-2025-11068 westboy CicadasCMS save cross site scripting CVE-2022-3991 Photospace Gallery <= 2.3.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2025-9422 oitcode samarium Team Image team cross site scripting