CVE-2022-0640

CVE-2022-0640: AP Pricing Tables Lite < 1.1.5 - Reflected Cross-Site Scripting

Vendor Unknown
Product Pricing Table Builder – AP Pricing Tables Lite
Weakness CWE-79 · XSS
Published March 21, 2022
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Pricing Table Builder WordPress plugin before 1.1.5 does not sanitize and escape the postid parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.

Key dates

02Disclosure timeline

March 21, 2022 CVE published
August 2, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-33979 Cross-site Scripting in Janobe products CVE-2024-54264 WordPress Shortcodes Blocks Creator Ultimate plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-49759 LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/edituser.inc.php CVE-2024-20488 Cisco Unified Communications Manager Cross-Site Scripting Vulnerability CVE-2025-68525 WordPress Category Icon plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability