CVE-2022-0625

🗓️ 09 May 2022 16:50:31Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 86 Views🌐 WEB

The Admin Menu Editor WordPress plugin through 1.0.4 allows Reflected Cross-Site Scripting

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2022-0625	9 May 202217:15	–	attackerkb
CNNVD	WordPress plugin Admin Menu Editor 跨站脚本漏洞	9 May 202200:00	–	cnnvd
Cvelist	CVE-2022-0625 Admin Menu Editor <= 1.0.4 - Reflected Cross-Site Scripting	9 May 202216:50	–	cvelist
EUVD	EUVD-2022-15722	3 Oct 202520:07	–	euvd
NVD	CVE-2022-0625	9 May 202217:15	–	nvd
OSV	CVE-2022-0625	9 May 202217:15	–	osv
Patchstack	WordPress Admin Menu Editor plugin <= 1.0.4 - Reflected Cross-Site Scripting (XSS) vulnerability	14 Apr 202200:00	–	patchstack
Prion	Cross site scripting	9 May 202217:15	–	prion
RedhatCVE	CVE-2022-0625	9 Jan 202610:45	–	redhatcve
wpexploit	Admin Menu Editor <= 1.0.4 - Reflected Cross-Site Scripting	13 Apr 202200:00	–	wpexploit

NVD

Vulners

Node

admin_menu_editor_project admin_menu_editorRange≤1.0.4wordpress

[
  {
    "product": "Admin Menu Editor",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "1.0.4",
        "status": "affected",
        "version": "1.0.4",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/ec5c331c-fb74-4ccc-a4d4-446c2b4e703a

Parameter	Position	Path	Description	CWE
role	query param	/wp-admin/options-general.php?page=admin-menu-restriction&role="><svg/onload=alert(/XSS/)>	Reflected XSS due to lack of sanitization/escaping of user input in admin page output	CWE-79

17 Jun 2026 04:20Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24.3

CVSS 3.16.1

EPSS0.00757

CWE-79