CVE-2022-1593

CVE-2022-1593: Site Offline or Coming Soon <= 1.6.6 - Stored Cross-Site Scripting via CSRF

Vendor Unknown

Product Site Offline or Coming Soon

Weakness CWE-79 · XSS

Published June 27, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Site Offline or Coming Soon WordPress plugin through 1.6.6 does not have CSRF check in place when updating its settings, and it also lacking sanitisation as well as escaping in some of them. As a result, attackers could make a logged in admin change them and put Cross-Site Scripting payloads in them via a CSRF attack

Key dates

02Disclosure timeline

June 27, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-1593 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2021-24785 Great Quotes <= 1.0.0 - Admin+ Stored Cross-Site Scripting CVE-2024-5373 Kashipara College Management System submit_login.php cross site scripting CVE-2025-40683 Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System CVE-2024-9064 Elementor Inline SVG <= 1.2.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CVE-2025-47500 WordPress Stackable plugin <= 3.19.5 - Cross Site Scripting (XSS) vulnerability