CVE-2022-2167

🗓️ 31 Oct 2022 00:00:00Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 67 Views🌐 WEB

The Newspaper WordPress theme before 12 lacks sanitization, leading to Reflected Cross-Site Scriptin

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2022-2167	31 Oct 202219:38	–	circl
CNNVD	WordPress theme Newspaper 跨站脚本漏洞	31 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-2167 Newspaper < 12 - Reflected Cross-Site Scripting	31 Oct 202200:00	–	cvelist
EUVD	EUVD-2022-34452	3 Oct 202520:07	–	euvd
NVD	CVE-2022-2167	31 Oct 202216:15	–	nvd
Patchstack	WordPress Newspaper premium theme <= 11.5.1 - Reflected Cross-Site Scripting (XSS) vulnerability	10 Oct 202200:00	–	patchstack
Prion	Cross site scripting	31 Oct 202216:15	–	prion
Positive Technologies	PT-2022-15023 · WordPress · Newspaper	31 Oct 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-2167	22 May 202522:23	–	redhatcve
Vulnrichment	CVE-2022-2167 Newspaper < 12 - Reflected Cross-Site Scripting	31 Oct 202200:00	–	vulnrichment

NVD

Vulners

Node

tagdiv newspaperRange<12wordpress

[
  {
    "vendor": "Unknown",
    "product": "Newspaper",
    "versions": [
      {
        "version": "12",
        "status": "affected",
        "lessThan": "12",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/ad35fbae-1e90-47a0-b1d2-f8d91a5db90e

Parameter	Position	Path	Description	CWE
atts	request body	/wp-admin/admin-ajax.php	Reflected XSS via unsanitized parameter in HTML attribute output in AJAX action	CWE-79

07 May 2025 14:15Current

6Medium risk

Vulners AI Score6

CVSS 3.16.1

EPSS0.00496

SSVC

CWE-79