Medium severity6.1NVD Advisory· Published Jul 17, 2022· Updated Jun 17, 2026

CVE-2022-2173

Description

The Advanced Database Cleaner WordPress plugin before 3.1.1 does not escape numerous generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Advanced Database Cleanercpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <3.1.1
Package: https://wordpress.org/plugins/advanced-database-cleaner

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/86bfe0cc-a579-43d6-a26b-6e06000251f6nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000