CVE-2022-0911

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.

• CWE-79
• CWE-79

• https://github.com/pimcore/pimcore/commit/6e0922c5b2959ac1b48500ac508d8fc5a97286f9Patch, Third Party Advisory
• https://huntr.dev/bounties/b242edb1-b036-4dca-9b53-891494dd7a77Exploit, Third Party Advisory
• https://github.com/pimcore/pimcore/commit/6e0922c5b2959ac1b48500ac508d8fc5a97286f9Patch, Third Party Advisory
• https://huntr.dev/bounties/b242edb1-b036-4dca-9b53-891494dd7a77Exploit, Third Party Advisory

Published

Mar 16, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0905Missing Authorization in GitHub repository go-gitea/gitea pr…7.1
• CVE-2022-0906Unrestricted file upload leads to stored XSS in GitHub repos…4.8
• CVE-2022-0907Unchecked Return Value to NULL Pointer Dereference in tiffcr…5.5
• CVE-2022-0908Null source pointer passed as an argument to memcpy() functi…5.5
• CVE-2022-0909Divide By Zero error in tiffcrop in libtiff 4.3.0 allows att…5.5
• CVE-2022-0910A downgrade from two-factor authentication to one-factor aut…6.5
• CVE-2022-0912Unrestricted Upload of File with Dangerous Type in GitHub re…4.8
• CVE-2022-0913Integer Overflow or Wraparound in GitHub repository microweb…7.5
• CVE-2022-0914The Export All URLs WordPress plugin before 4.3 does not hav…6.5
• CVE-2022-0915There is a Time-of-check Time-of-use (TOCTOU) Race Condition…7
• CVE-2022-0916An issue was discovered in Logitech Options. The OAuth 2.0 s…8.8
• CVE-2022-0918A vulnerability was discovered in the 389 Directory Server t…7.5