Medium severity6.1NVD Advisory· Published Jul 25, 2022· Updated Jun 17, 2026
CVE-2022-2071
CVE-2022-2071
Description
The Name Directory WordPress plugin before 1.25.4 does not have CSRF check when importing names, and is also lacking sanitisation as well as escaping in some of the imported data, which could allow attackers to make a logged in admin import arbitrary names with XSS payloads in them.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: <1.25.4
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/d3653976-9e0a-4f2b-87f7-26b5e7a74b9dnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.