CVE-2022-1290

Stored XSS in "Name", "Group Name" & "Title" in GitHub repository polonel/trudesk prior to v1.2.0. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse.

• CWE-79

• https://github.com/polonel/trudesk/commit/4f48b3bb86ba66a0085803591065bb6437e864ecPatch, Third Party Advisory
• https://huntr.dev/bounties/da6d03e6-053f-43b6-99a7-78c2e386e3edExploit, Third Party Advisory
• https://github.com/polonel/trudesk/commit/4f48b3bb86ba66a0085803591065bb6437e864ecPatch, Third Party Advisory
• https://huntr.dev/bounties/da6d03e6-053f-43b6-99a7-78c2e386e3edExploit, Third Party Advisory

Published

Apr 10, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1284heap-use-after-free in GitHub repository radareorg/radare2 p…5.5
• CVE-2022-1285Server-Side Request Forgery (SSRF) in GitHub repository gogs…6.5
• CVE-2022-1286heap-buffer-overflow in mrb_vm_exec in mruby/mruby in GitHub…9.8
• CVE-2022-1287A vulnerability classified as critical was found in School C…9.8
• CVE-2022-1288A vulnerability, which was classified as problematic, has be…6.1
• CVE-2022-1289A denial of service vulnerability was found in tildearrow Fu…6.5
• CVE-2022-1291XSS vulnerability with default `onCellHtmlData` function in …5.4
• CVE-2022-1292The c_rehash script does not properly sanitise shell metacha…7.3
• CVE-2022-1293The embedded neutralization of Script-Related HTML Tag, was …6.1
• CVE-2022-1294The IMDB info box WordPress plugin through 2.0 does not sani…4.8
• CVE-2022-1295Prototype Pollution in GitHub repository alvarotrigo/fullpag…9.8
• CVE-2022-1296Out-of-bounds read in `r_bin_ne_get_relocs` function in GitH…9.1