CVE-2022-34991

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Paymoney v3.3 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the first_name and last_name parameters.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jul 26, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-349927.8Luadec v0.9.9 was discovered to contain a heap-buffer overflow via the function UnsetPending.CVE-2022-349939.8Totolink A3600R_Firmware V4.1.2cu.5182_B20201102 contains a hard code password for root in /etc/shadow.sample.CVE-2022-349987.8JPEGDEC commit be4843c was discovered to contain a global buffer overflow via JPEGDecodeMCU at /src/jpeg.inl.CVE-2022-349995.5JPEGDEC commit be4843c was discovered to contain a FPE via DecodeJPEG at /src/jpeg.inl.CVE-2022-35005.1A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there exCVE-2022-350005.5JPEGDEC commit be4843c was discovered to contain a segmentation fault via fseek at /libio/fseek.c.CVE-2022-350025.5JPEGDEC commit be4843c was discovered to contain a segmentation fault via TIFFSHORT at /src/jpeg.inl.CVE-2022-350037.8JPEGDEC commit be4843c was discovered to contain a global buffer overflow via ucDitherBuffer at /src/jpeg.inl.CVE-2022-350045.5JPEGDEC commit be4843c was discovered to contain a FPE via TIFFSHORT at /src/jpeg.inl.CVE-2022-350076.5PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via __interceptor_fwrite.part.57 at sanitizer_common_interceptors.incCVE-2022-350086.5PNGDec commit 8abf6be was discovered to contain a stack overflow via /linux/main.cpp.CVE-2022-350096.5PNGDec commit 8abf6be was discovered to contain a memory allocation problem via asan_malloc_linux.cpp.
CVE-2022-34991: Medium severity, CVSS 5.4 | Vulnix