CVE-2022-2340

CVE-2022-2340: W-DALIL <= 2.0 - Admin+ Stored Cross-Site Scripting

Vendor Unknown
Product W-DALIL
Weakness CWE-79 · XSS
Published July 25, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The W-DALIL WordPress plugin through 2.0 does not sanitise and escape some of its fields, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup)

Key dates

02Disclosure timeline

July 25, 2022 CVE published
August 3, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2020-9732 Stored XSS in AEM Sites Components CVE-2024-11332 HIPAA Compliant Forms with Drag’n’Drop HIPAA Form Builder. Sign HIPAA documents <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2026-53568 Frappe: Stored XSS in Frappe Report/List View via 'set_link_title_field_value' CVE-2022-2087 SourceCodester Bank Management System cross site scripting CVE-2024-5946 Squelch Tabs and Accordions Shortcodes <= 0.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via tab Shortcode