CVE-2022-2669

🗓️ 16 Sep 2022 08:40:32Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 68 Views🌐 WEB

The WP Taxonomy Import WordPress plugin through 1.0.4 is prone to Reflected XSS

Reporter	Title	Published	Views	Family All 11
CNNVD	WordPress plugin WP Taxonomy Import 跨站脚本漏洞	16 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-2669 WP Taxonomy Import <= 1.0.4 - Reflected Cross-Site Scripting	16 Sep 202208:40	–	cvelist
EUVD	EUVD-2022-34914	3 Oct 202520:07	–	euvd
NVD	CVE-2022-2669	16 Sep 202209:15	–	nvd
Patchstack	WordPress WP Taxonomy Import plugin <= 1.0.4 - Reflected Cross-Site Scripting (XSS) vulnerability	22 Aug 202200:00	–	patchstack
Prion	Cross site scripting	16 Sep 202209:15	–	prion
Positive Technologies	PT-2022-18007 · WordPress · Wp Taxonomy Import	16 Sep 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-2669	22 May 202522:34	–	redhatcve
Vulnrichment	CVE-2022-2669 WP Taxonomy Import <= 1.0.4 - Reflected Cross-Site Scripting	16 Sep 202208:40	–	vulnrichment
wpexploit	WP Taxonomy Import <= 1.0.4 - Reflected Cross-Site Scripting	22 Aug 202200:00	–	wpexploit

NVD

Vulners

Node

wp_taxonomy_import_project wp_taxonomy_importRange≤1.0.4wordpress

[
  {
    "product": "WP Taxonomy Import",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "1.0.4",
        "status": "affected",
        "version": "1.0.4",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/792d9f22-abf6-47b2-a247-d0cdb705cd81

Parameter	Position	Path	Description	CWE
bulkCategoryList	request body	/wp-admin/options-general.php?page=wp-taxonomy-import%2Fwp-taxonomy-import.php	Reflected Cross-Site Scripting due to unsanitized user input echoed back in the page	CWE-79

05 Jun 2025 19:15Current

6Medium risk

Vulners AI Score6

CVSS 3.16.1

EPSS0.00303

SSVC

CWE-79