CVE-2022-0627

CVE-2022-0627: Amelia < 1.0.46 - Reflected Cross-Site Scripting

Vendor Unknown

Product Amelia – Events & Appointments Booking Calendar

Weakness CWE-79 · XSS

Published March 21, 2022

Last update August 2, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Amelia WordPress plugin before 1.0.47 does not sanitize and escape the code parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.

Key dates

02Disclosure timeline

March 21, 2022 CVE published

August 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-0627 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2024-2253 Testimonial Carousel For Elementor <= 10.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2022-23519 Possible XSS vulnerability with certain configurations of rails-html-sanitizer CVE-2019-25453 phpMoAdmin 1.1.5 Reflected Cross-Site Scripting via moadmin.php CVE-2021-44163 Chain Sea Information Integration Co., Ltd ai chatbot system - Reflected XSS CVE-2010-10004 Information Cards Module cross site scripting