CVE-2022-2574

CVE-2022-2574: Meks Easy Social Share < 1.2.8 - Admin+ Stored Cross-Site Scripting

Vendor Unknown

Product Meks Easy Social Share

Weakness CWE-79 · XSS

Published October 17, 2022

Last update May 13, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Meks Easy Social Share WordPress plugin before 1.2.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

Key dates

02Disclosure timeline

October 17, 2022 CVE published

May 13, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-2574 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2025-64581 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2021-3768 Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack CVE-2026-9518 hemant6488 CodeIgniter-StudentManagementSystem Students Controller view_students.php addStudent cross site scripting CVE-2024-51588 WordPress Super Addons for Elementor plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability CVE-2025-40663 Stored Cross-Site Scripting (XSS) in i2A-Cronos by i2A