CVE-2022-2173

6.1 mediumEPSS 0.8%

Medium (6.1) in sigmaplugin advanced database cleaner. EPSS 0.8% chance of exploitation in the next 30 days.

The Advanced Database Cleaner WordPress plugin before 3.1.1 does not escape numerous generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-11-01)
CWE: CWE-79
Published: 2022-07-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sigmaplugin:advanced_database_cleaner

References

https://wpscan.com/vulnerability/86bfe0cc-a579-43d6-a26b-6e06000251f6
https://wpscan.com/vulnerability/86bfe0cc-a579-43d6-a26b-6e06000251f6

Check your stack JSON