First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-41135

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Unauth. Plugin Settings Change vulnerability in Modula plugin <= 2.6.9 on WordPress.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
WPChill	Modula Image Gallery (WordPress plugin)	>= <= 2.6.9, <= 2.6.9

References

Timeline

Published: Nov 18, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-411368.8Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in Vladimir Anokhin's Shortcodes Ultimate plugi CVE-2022-411378.3Apache Hive Metastore (HMS) uses SerializationUtilities#deserializeObjectWithTypeInformation method when filtering and fetching partitions t CVE-2022-411389.8In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution.CVE-2022-411395.4MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist (aka the gist contact configuration field), leading to execution of arbitrary com CVE-2022-41145.4The Superio WordPress theme does not sanitise and escape some parameters, which could allow users with a role as low as a subscriber to perf CVE-2022-411408.8This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple D-Link routers. Authent CVE-2022-411417.8This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the CVE-2022-411428.8This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to explo CVE-2022-411437.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is re CVE-2022-411447.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is re CVE-2022-411455.5This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interacti CVE-2022-411465.5This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interacti

CVE-2022-41135: Medium severity, CVSS 5.3 | Vulnix