CVE-2022-1192

CVE-2022-1192: Turn off all comments <= 1.0 - Reflected Cross-Site Scripting

Vendor Unknown

Product Turn off all comments

Weakness CWE-79 · XSS

Published May 23, 2022

Last update August 2, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Turn off all comments WordPress plugin through 1.0 does not sanitise and escape the rows parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting

Key dates

02Disclosure timeline

May 23, 2022 CVE published

August 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-1192 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2024-3675 Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flip Carousel, Flip Box, Post Grid, and Taxonomy List Widget Attributes CVE-2026-4816 Reflected Cross Site Scripting (XSS) vulnerability in Support Board CVE-2024-12841 Emlog Pro tag.php cross site scripting CVE-2025-58790 WordPress Kiwi Plugin <= 2.1.8 - Cross Site Scripting (XSS) Vulnerability CVE-2019-25376 OPNsense 19.1 Reflected XSS via proxy endpoint