CVE-2022-4748

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in FlatPress. It has been classified as critical. This affects the function doItemActions of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component File Delete Handler. The manipulation of the argument deletefile leads to path traversal. The name of the patch is 5d5c7f6d8f072d14926fc2c3a97cdd763802f170. It is recommended to apply a patch to fix this issue. The identifier VDB-216861 was assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
Dec 27, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-474805.5In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additionaCVE-2022-474815.5In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additionaCVE-2022-474825.5In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additionaCVE-2022-474835.5In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additionaCVE-2022-474845.5In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additionaCVE-2022-474854.4In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service wCVE-2022-474864.4In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service witCVE-2022-474875.5In thermal service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service local CVE-2022-474884.4In spipe drive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SysteCVE-2022-474894.4In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SysCVE-2022-47495.4The Posts List Designer by Category WordPress plugin before 3.2 does not validate and escape some of its shortcode attributes before outputtCVE-2022-474905.5In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution priv
CVE-2022-4748: Critical severity, CVSS 9.8 | Vulnix