CVE-2022-1045

Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0.

• CWE-434

• https://github.com/polonel/trudesk/commit/c4b262c2613d4a8865de0b3252112544bd81997aPatch, Third Party Advisory
• https://huntr.dev/bounties/b0c4f992-4ac8-4479-82f4-367ed1a2a826Exploit, Third Party Advisory
• https://github.com/polonel/trudesk/commit/c4b262c2613d4a8865de0b3252112544bd81997aPatch, Third Party Advisory
• https://huntr.dev/bounties/b0c4f992-4ac8-4479-82f4-367ed1a2a826Exploit, Third Party Advisory

Published

Apr 11, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1039The weak password on the web user interface can be exploited…9.8
• CVE-2022-1040An authentication bypass vulnerability in the User Portal an…9.8
• CVE-2022-1041In Zephyr bluetooth mesh core stack, an out-of-bound write v…8.8
• CVE-2022-1042In Zephyr bluetooth mesh core stack, an out-of-bound write v…8.8
• CVE-2022-1043A flaw was found in the Linux kernel’s io_uring implementati…8.8
• CVE-2022-1044Sensitive Data Exposure Due To Insecure Storage Of Profile I…6.5
• CVE-2022-1046The Visual Form Builder WordPress plugin before 3.0.7 does n…4.8
• CVE-2022-1047The Themify Post Type Builder Search Addon WordPress plugin …6.1
• CVE-2022-1048A use-after-free flaw was found in the Linux kernel’s sound …7
• CVE-2022-1049A flaw was found in the Pacemaker configuration tool (pcs). …8.8
• CVE-2022-1050A flaw was found in the QEMU implementation of VMWare's para…8.8
• CVE-2022-1051The WPQA Builder Plugin WordPress plugin before 5.2, used as…5.4