CVE-2022-2378

🗓️ 15 Aug 2022 08:37:09Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 59 Views🌐 WEB

The Easy Student Results WordPress plugin through 2.2.8 is prone to Reflected Cross-Site Scripting

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2022-2378	15 Aug 202211:21	–	attackerkb
Circl	CVE-2022-2378	15 Aug 202214:37	–	circl
CNNVD	WordPress plugin Easy Student Results 跨站脚本漏洞	15 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-2378 Easy Student Results <= 2.2.8 - Reflected Cross-Site Scripting	15 Aug 202208:37	–	cvelist
EUVD	EUVD-2022-34645	3 Oct 202520:07	–	euvd
NVD	CVE-2022-2378	15 Aug 202211:21	–	nvd
OSV	CVE-2022-2378	15 Aug 202211:21	–	osv
Patchstack	WordPress Easy Student Results plugin <= 2.2.8 - Reflected Cross-Site Scripting (XSS) vulnerability	19 Jul 202200:00	–	patchstack
Prion	Cross site scripting	15 Aug 202211:21	–	prion
Positive Technologies	PT-2022-16263 · WordPress · Easy Student Results	15 Aug 202200:00	–	ptsecurity

NVD

Vulners

Node

easy_student_results_project easy_student_resultsRange≤2.2.8wordpress

[
  {
    "product": "Easy Student Results",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "2.2.8",
        "status": "affected",
        "version": "2.2.8",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/3f4e8fe5-1c92-49ad-b709-a40749c80596

Parameter	Position	Path	Description	CWE
edit	query param	/wp-admin/admin.php?page=rps_result_batch&edit=%3Cscript%3Ealert(/XSS/)%3C/script%3E	Reflected Cross-Site Scripting due to insufficient sanitisation/escaping of a user-controlled parameter before output	CWE-79

17 Jun 2026 04:41Current

6Medium risk

Vulners AI Score6

CVSS 3.16.1

EPSS0.0051

CWE-79