CVE-2022-0619

6.1 mediumEPSS 0.8%

Medium (6.1) in database peek project database peek. EPSS 0.8% chance of exploitation in the next 30 days.

The Database Peek WordPress plugin through 1.2 does not sanitize and escape the match parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2022-03-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

database_peek_project:database_peek

References

https://wpscan.com/vulnerability/d18892c6-2b19-4037-bc39-5d170adaf3d9
https://wpscan.com/vulnerability/d18892c6-2b19-4037-bc39-5d170adaf3d9

Check your stack JSON