CVE-2022-4444

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in ipti br.tag. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 2.13.0 is able to address this issue. The name of the patch is 7e311be22d3a0a1b53e61cb987ba13d681d85f06. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-215431.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-707CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Dec 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-444405.5In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.CVE-2022-444415.5In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.CVE-2022-444425.5In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.CVE-2022-444435.5In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.CVE-2022-444445.5In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.CVE-2022-444455.5In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.CVE-2022-444465.5In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.CVE-2022-444475.5In wlan driver, there is a possible null pointer dereference issue due to a missing bounds check. This could lead to local denial of serviceCVE-2022-444485.5In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.CVE-2022-444494.8Stored cross-site scripting vulnerability in Zenphoto versions prior to 1.6 allows remote a remote authenticated attacker with an administraCVE-2022-44459.8The FL3R FeelBox WordPress plugin through 8.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJCVE-2022-444517.8A use of uninitialized pointer vulnerability exists in the MSI format atom functionality of Open Babel 3.1.1 and master commit 530dbfa3. A s
CVE-2022-4444: Medium severity, CVSS 6.1 | Vulnix