CVE-2022-1782

Cross-site Scripting (XSS) - Generic in GitHub repository erudika/para prior to v1.45.11.

• CWE-79
• CWE-79

• https://github.com/erudika/para/commit/9d844f31333475a0394dd14b901ea50674b281f8Patch, Third Party Advisory
• https://huntr.dev/bounties/7555693f-94e4-4183-98cb-3497da6df028Exploit, Third Party Advisory
• https://github.com/erudika/para/commit/9d844f31333475a0394dd14b901ea50674b281f8Patch, Third Party Advisory
• https://huntr.dev/bounties/7555693f-94e4-4183-98cb-3497da6df028Exploit, Third Party Advisory

Published

May 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1776The Popups, Welcome Bar, Optins and Lead Generation Plugin W…5.4
• CVE-2022-1777The Filr WordPress plugin before 1.2.2.1 does not have autho…8.8
• CVE-2022-1778Improper Input Validation vulnerability in Hitachi Energy Mi…4.4
• CVE-2022-1779The Auto Delete Posts WordPress plugin through 1.3.0 does no…8.1
• CVE-2022-1780The LaTeX for WordPress plugin through 3.4.10 does not have …5.4
• CVE-2022-1781The postTabs WordPress plugin through 2.10.6 does not have C…5.4
• CVE-2022-1783An issue has been discovered in GitLab CE/EE affecting all v…2.7
• CVE-2022-1784Server-Side Request Forgery (SSRF) in GitHub repository jgra…7.5
• CVE-2022-1785Out-of-bounds Write in GitHub repository vim/vim prior to 8.…7.8
• CVE-2022-1786A use-after-free flaw was found in the Linux kernel’s io_uri…7.8
• CVE-2022-1787The Sideblog WordPress plugin through 6.0 does not have CSRF…5.4
• CVE-2022-1788Due to missing checks the Change Uploaded File Permissions W…6.5