CVE-2022-26842

CriticalCVSS 9.6/10Last modified Jun 17, 2026

Description

A reflected cross-site scripting (xss) vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger this vulnerability.

Metrics

CVSS 3.1 9.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Aug 22, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-268439.8Insufficient visual distinction of homoglyphs presented to user in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.1 for Intel(R)CVE-2022-268447.8Insufficiently protected credentials in the installation binaries for Intel(R) SEAPI in all versions may allow an authenticated user to pote CVE-2022-268459.8Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may all CVE-2022-268468.8SPIP before 3.2.14 and 4.x before 4.0.5 allows remote authenticated editors to execute arbitrary code.CVE-2022-268475.3SPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about editorial objects.CVE-2022-26856.1A vulnerability was found in SourceCodester Interview Management System 1.0 and classified as problematic. This issue affects some unknown p CVE-2022-268504.3When creating or updating credentials for single-user access, Apache NiFi wrote a copy of the Login Identity Providers configuration to the CVE-2022-268519.1Dell PowerScale OneFS, 8.2.2-9.3.x, contains a predictable file name from observable state vulnerability. An unprivileged network attacker c CVE-2022-268529.8Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a predictable seed in pseudo-random number generator. A remote unauthenticated attacker CVE-2022-268549.8Dell PowerScale OneFS, versions 8.2.x-9.2.x, contain risky cryptographic algorithms. A remote unprivileged malicious attacker could potentia CVE-2022-268555.5Dell PowerScale OneFS, versions 8.2.x-9.3.0.x, contains an incorrect default permissions vulnerability. A local malicious user could potenti CVE-2022-268567.8Dell EMC Repository Manager version 3.4.0 contains a plain-text password storage vulnerability. A local attacker could potentially exploit t