CVE-2022-2473

🗓️ 06 Sep 2022 17:18:58Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 66 Views

The WP-UserOnline plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘templates[browsingpage][text]' parameter in versions up to, and including, 2.87.6 due to insufficient input sanitization and output escaping

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2022-2473	6 Sep 202218:15	–	attackerkb
CNNVD	WordPress plugin WP-UserOnline 跨站脚本漏洞	6 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-2473 WP-UserOnline <= 2.87.6 - Authenticated (Admin+) Stored Cross-Site Scripting	6 Sep 202217:18	–	cvelist
EUVD	EUVD-2022-34732	3 Oct 202520:07	–	euvd
NVD	CVE-2022-2473	6 Sep 202218:15	–	nvd
OSV	CVE-2022-2473	6 Sep 202218:15	–	osv
Patchstack	WordPress WP-UserOnline plugin <= 2.87.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability	19 Jul 202200:00	–	patchstack
Prion	Cross site scripting	6 Sep 202218:15	–	prion
Positive Technologies	PT-2022-16836 · WordPress · Wp-Useronline	6 Sep 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-2473	22 May 202522:59	–	redhatcve

NVD

Vulners

Node

wp-useronline_project wp-useronlineRange≤2.87.6wordpress

[
  {
    "vendor": "gamerz",
    "product": "WP-UserOnline",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.87.6",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/6a44a55e-a96a-4698-9948-6ef33138a834
packetstormsecurity	www.packetstormsecurity.com/files/167864/wpuseronline2876-xss.txt
youtu	www.youtu.be/Q3zInrUnAV0
wordfence	www.wordfence.com/vulnerability-advisories/
exploitalert	www.exploitalert.com/view-details.html
exploit-db	www.exploit-db.com/exploits/50988
exploitalert	www.exploitalert.com/view-details.html
plugins	www.plugins.trac.wordpress.org/changeset

08 Apr 2026 18:17Current

4.6Medium risk

Vulners AI Score4.6

CVSS 3.14.8 - 5.5

EPSS0.00988

SSVC

CWE-79