CVE-2022-1089

CVE-2022-1089: Bulk Edit and Create User Profiles < 1.5.14 - Admin+ Stored Cross-Site Scripting

Vendor Unknown
Product Bulk Edit and Create User Profiles – WP Sheet Editor
Weakness CWE-79 · XSS
Published May 16, 2022
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Bulk Edit and Create User Profiles WordPress plugin before 1.5.14 does not sanitise and escape the Users Login, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

Key dates

02Disclosure timeline

May 16, 2022 CVE published
August 2, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-51735 Stored Cross-site Scripting to RCE on Osmedeus Web Server CVE-2024-43936 WordPress EmbedPress plugin <= 4.0.8 - Cross Site Scripting (XSS) vulnerability CVE-2025-24578 WordPress ElementInvader Addons for Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability CVE-2023-45829 WordPress Newsletter & Bulk Email Sender Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS) CVE-2025-36132 IBM Planning Analytics Local cross-site scripting