CVE-2022-0626

6.1 mediumEPSS 0.8%

Medium (6.1) in kuroit advanced admin search. EPSS 0.8% chance of exploitation in the next 30 days.

The Advanced Admin Search WordPress plugin before 1.1.6 does not sanitize and escape some parameters before outputting them back in an admin page, leading to a Reflected Cross-Site Scripting.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2022-06-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

kuroit:advanced_admin_search

References

https://wpscan.com/vulnerability/d72164e2-8449-4fb1-aad3-bfa86d645e47
https://wpscan.com/vulnerability/d72164e2-8449-4fb1-aad3-bfa86d645e47

Check your stack JSON