CVE-2022-3209

CVE-2022-3209: Soledad < 8.2.5 - Reflected Cross-site Scripting

Vendor Unknown

Product soledad

Weakness CWE-79 · XSS

Published October 10, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The soledad WordPress theme before 8.2.5 does not sanitise the {id,datafilter[type],...} parameters in its penci_more_slist_post_ajax AJAX action, leading to a Reflected Cross-Site Scripting (XSS) vulnerability.

Key dates

02Disclosure timeline

October 10, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-3209

Related vulnerabilities

04Related CVE

CVE-2026-25490 Craft Commerce has Stored XSS in Inventory Location Address Leading to Potential Privilege Escalation CVE-2023-48682 CVE-2025-49395 WordPress Themify Icons Plugin <= 2.0.3 - Cross Site Scripting (XSS) Vulnerability CVE-2026-3317 Reflected Cross-Site Scripting in Navigate CMS application CVE-2026-27223 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)