CVE-2022-1590

A vulnerability was found in Bludit 3.13.1. It has been declared as problematic. This vulnerability affects the endpoint /admin/new-content of the New Content module. The manipulation of the argument content with the input <script>alert(1)</script> leads to cross site scripting. The attack can be initiated remotely but requires an authentication. The exploit has been disclosed to the public and may be used.

• CWE-79
• CWE-79

• https://github.com/joinia/webray.com.cn/blob/main/Bludit/Bluditreadme.mdExploit, Third Party Advisory
• https://vuldb.com/?id.199060Permissions Required, Third Party Advisory
• https://github.com/joinia/webray.com.cn/blob/main/Bludit/Bluditreadme.mdExploit, Third Party Advisory
• https://vuldb.com/?id.199060Permissions Required, Third Party Advisory

Published

May 5, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1584Reflected XSS in GitHub repository microweber/microweber pri…6.1
• CVE-2022-1585The Project Source Code Download WordPress plugin through 1.…7.5
• CVE-2022-1586An out-of-bounds read vulnerability was discovered in the PC…9.1
• CVE-2022-1587An out-of-bounds read vulnerability was discovered in the PC…9.1
• CVE-2022-1588Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: T…
• CVE-2022-1589The Change wp-admin login WordPress plugin before 1.1.0 does…7.5
• CVE-2022-1591The WordPress Ping Optimizer WordPress plugin before 2.35.1.…4.3
• CVE-2022-1592Server-Side Request Forgery in scout in GitHub repository cl…8.2
• CVE-2022-1593The Site Offline or Coming Soon WordPress plugin through 1.6…6.1
• CVE-2022-1594The HC Custom WP-Admin URL WordPress plugin through 1.4 does…4.3
• CVE-2022-1595The HC Custom WP-Admin URL WordPress plugin through 1.4 leak…5.3
• CVE-2022-1596Incorrect Permission Assignment for Critical Resource vulner…6.5