CVE

CVE-2022-4306

5.4

CVSSmedium

Exploitable remotely over the internet · low-privilege account sufficient · user interaction needed.

Description

The Panda Pods Repeater Field WordPress plugin before 1.5.4 does not sanitize and escapes a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against a user having at least Contributor permission.

Attack Vector

Network

Privileges Req.

Low

User Interaction

Required

panda pods repeater field

Updated Sep 26, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~10 seconds

CVE-2022-4306 Scanner

Detects 'Cross-Site Scripting (XSS)' vulnerability in Panda Pods Repeater Field plugin for WordPress affects v. before 1.5.4.

Used 2.3k times · 5.9k assets checked · domain, ipv4, subdomain

Scanner page →Run scanner

CVE history: panda pods repeater field

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →