CVE-2022-0428

PoC —

CVSS 3.1

6.1 medium

EPSS

<1%p54

Published

May 2, 2022 (May 2, 2022)

Modified

Jun 17, 2026

Description

The Content Egg WordPress plugin before 5.3.0 does not sanitise and escape the page parameter before outputting back in an attribute in the Autoblogging admin dashboard, leading to a Reflected Cross-Site Scripting

Vendors: keywordrush
Products: content egg
Ecosystems: WordPress
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.