CVE-2022-1173

stored xss in GitHub repository getgrav/grav prior to 1.7.33.

• CWE-79
• CWE-79

• https://github.com/getgrav/grav/commit/1c0ed43afa5dc14169e6aa693b38e1a2f7aecad9Patch, Third Party Advisory
• https://huntr.dev/bounties/b6016e95-9f48-4945-89cb-199b6e072218Exploit, Third Party Advisory
• https://github.com/getgrav/grav/commit/1c0ed43afa5dc14169e6aa693b38e1a2f7aecad9Patch, Third Party Advisory
• https://huntr.dev/bounties/b6016e95-9f48-4945-89cb-199b6e072218Exploit, Third Party Advisory

Published

Apr 26, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1167There are unauthenticated reflected Cross-Site Scripting (XS…6.1
• CVE-2022-1168There is a Cross-Site Scripting vulnerability in the JobSear…6.1
• CVE-2022-1169There is a XSS vulnerability in Careerfy.6.1
• CVE-2022-1170In the Noo JobMonster WordPress theme before 4.5.2.9 JobMons…6.1
• CVE-2022-1171The Vertical scroll recent post WordPress plugin before 14.0…6.1
• CVE-2022-1172Null Pointer Dereference Caused Segmentation Fault in GitHub…5
• CVE-2022-1174A potential DoS vulnerability was discovered in Gitlab CE/EE…7.5
• CVE-2022-1175Improper neutralization of user input in GitLab CE/EE versio…6.1
• CVE-2022-1176Loose comparison causes IDOR on multiple endpoints in GitHub…7.5
• CVE-2022-1177Accounting User Can Download Patient Reports in openemr in G…4.3
• CVE-2022-1178Stored Cross Site Scripting in GitHub repository openemr/ope…5.4
• CVE-2022-1179Non-Privilege User Can Created New Rule and Lead to Stored C…5.4