CVE-2022-48614

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Special:Ask in Semantic MediaWiki before 4.0.2 allows Reflected XSS.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Dec 10, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-486157.1An improper access control vulnerability exists in a Huawei datacom product. Attackers can exploit this vulnerability to obtain partial deviCVE-2022-486167.5A Huawei data communication product has a command injection vulnerability. Successful exploitation of this vulnerability may allow attackersCVE-2022-486187.0The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. ACVE-2022-486195.5An issue was discovered in drivers/input/input.c in the Linux kernel before 5.17.10. An attacker can cause a denial of service (panic) becauCVE-2022-48627.6Rendering of HTML provided by another authenticated user is possible in browser on M-Files Web before 22.12.12140.3. This allows the contentCVE-2022-486209.8uev (aka libuev) before 2.4.1 has a buffer overflow in epoll_wait if maxevents is a large number.CVE-2022-486217.5Vulnerability of missing authentication for critical functions in the Wi-Fi module.Successful exploitation of this vulnerability may affect CVE-2022-486227.8In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_loaCVE-2022-486239.1The Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a way that allows attackers to obtain sensitive informaCVE-2022-486247.8close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.CVE-2022-486257.5Yealink Config Encrypt Tool add RSA before 1.2 has a built-in RSA key pair, and thus there is a risk of decryption by an adversary.CVE-2022-486267.8In the Linux kernel, the following vulnerability has been resolved: moxart: fix potential use-after-free on remove path It was reported th
CVE-2022-48614: Medium severity, CVSS 6.1 | Vulnix