CVE-2022-3804

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in eolinker apinto-dashboard. It has been classified as problematic. Affected is an unknown function of the file /login. The manipulation of the argument callback leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212640.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-707CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Nov 1, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-380408.8Microsoft ODBC Driver Remote Code Execution VulnerabilityCVE-2022-380417.5Windows Secure Channel Denial of Service VulnerabilityCVE-2022-380427.1Active Directory Domain Services Elevation of Privilege VulnerabilityCVE-2022-380435.5Windows Security Support Provider Interface Information Disclosure VulnerabilityCVE-2022-380447.8Windows CD-ROM File System Driver Remote Code Execution VulnerabilityCVE-2022-380458.8Windows Server Service Elevation of Privilege VulnerabilityCVE-2022-380467.5Web Account Manager Information Disclosure VulnerabilityCVE-2022-380478.1Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityCVE-2022-380487.8Microsoft Office Remote Code Execution VulnerabilityCVE-2022-380497.8Microsoft Office Graphics Remote Code Execution VulnerabilityCVE-2022-38057.5The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various functions used to update the plugin settings in CVE-2022-380507.8Win32k Elevation of Privilege Vulnerability