CVE-2022-1298

CVE-2022-1298: Tabs Responsive < 2.2.8 - Editor+ Stored Cross-Site Scripting

Vendor Unknown

Product Tabs

Weakness CWE-79 · XSS

Published May 23, 2022

Last update August 2, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Tabs WordPress plugin before 2.2.8 does not sanitise and escape Tab descriptions, which could allow high privileged users with a role as low as editor to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

Key dates

02Disclosure timeline

May 23, 2022 CVE published

August 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-1298 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2025-2141 IBM System Storage Virtualization Engine TS7700 cross-site scripting CVE-2026-22913 CVE-2025-11872 Material Design Iconic Font Integration <= 2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-36828 Statamic's Antlers sanitizer cannot effectively sanitize malicious SVG CVE-2021-24564 WPFront Scroll Top < 2.0.6.07225 - Authenticated Stored XSS