CVE-2022-2093

CVE-2022-2093: WP Duplicate Page < 1.3 - Admin+ Stored Cross Site Scripting

Vendor Unknown

Product WP Duplicate Page

Weakness CWE-79 · XSS

Published July 11, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The WP Duplicate Page WordPress plugin before 1.3 does not sanitize and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.

Key dates

02Disclosure timeline

July 11, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-2093 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2025-69082 WordPress Arlo theme <= 6.0.3 - Cross Site Scripting (XSS) vulnerability CVE-2021-34667 Calendar_plugin <= 1.0 Reflected Cross-Site Scripting CVE-2026-5806 code-projects Easy Blog Site update.php cross site scripting CVE-2023-45006 WordPress WooODT Lite Plugin <= 2.4.6 is vulnerable to Cross Site Scripting (XSS) CVE-2024-28776 IBM Cognos Controller cross-site scripting