CVE-2022-23543

Silverware Games is a social network where people can play games online. Users can attach URLs to YouTube videos, the site will generate related `<iframe>` when the post will be published. The handler has some sort of protection so non-YouTube links can't be posted, as well as HTML tags are being stripped. However, it was still possible to add custom HTML attributes (e.g. `onclick=alert("xss")`) to the `<iframe>'. This issue was fixed in the version `1.1.34` and does not require any extra actions from our members. There has been no evidence that this vulnerability was used by anyone at this time.

• CWE-80
• CWE-79

• https://github.com/mesosoi/silverwaregames-io-issue-tracker/security/advisories/GHSA-62r9-4v3r-rw89Third Party Advisory
• https://github.com/mesosoi/silverwaregames-io-issue-tracker/security/advisories/GHSA-62r9-4v3r-rw89Third Party Advisory

Published

Dec 19, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23538github.com/sylabs/scs-library-client is the Go client for th…7.6
• CVE-2022-23539Versions `<=8.5.1` of `jsonwebtoken` library could be miscon…8.1
• CVE-2022-2354The WP-DBManager WordPress plugin before 2.80.8 does not pre…7.2
• CVE-2022-23540In versions `<=8.5.1` of `jsonwebtoken` library, lack of alg…7.6
• CVE-2022-23541jsonwebtoken is an implementation of JSON Web Tokens. Versio…6.3
• CVE-2022-23542OpenFGA is an authorization/permission engine built for deve…9.8
• CVE-2022-23544MeterSphere is a one-stop open source continuous testing pla…6.1
• CVE-2022-23546In version 2.9.0.beta14 of Discourse, an open-source discuss…5.5
• CVE-2022-23547PJSIP is a free and open source multimedia communication lib…9.8
• CVE-2022-23548Discourse is an option source discussion platform. Prior to …6.5
• CVE-2022-23549Discourse is an option source discussion platform. Prior to …6.5
• CVE-2022-2355The Easy Username Updater WordPress plugin before 1.0.5 does…6.5