CVE-2022-1241

CVE-2022-1241: Ask Me < 6.8.2 - Reflected Cross-Site Scripting

Vendor Unknown

Product Ask me

Weakness CWE-79 · XSS

Published June 6, 2022

Last update August 2, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Ask me WordPress theme before 6.8.2 does not properly sanitise and escape several of the fields in the Edit Profile page, leading to Reflected Cross-Site Scripting issues

Key dates

02Disclosure timeline

June 6, 2022 CVE published

August 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-1241 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2024-39652 WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2022-0893 Cross-site Scripting (XSS) - Stored in pimcore/pimcore CVE-2025-13535 King Addons for Elementor <= 51.1.38 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Widgets CVE-2025-58874 WordPress StoryMap Plugin <= 2.1 - Cross Site Scripting (XSS) Vulnerability CVE-2025-9929 code-projects Responsive Blog Site blogs_view.php cross site scripting