CVE-2022-23871

Multiple cross-site scripting (XSS) vulnerabilities in the component outcomes_addProcess.php of Gibbon CMS v22.0.01 allow attackers to execute arbitrary web scripts or HTML via a crafted payload insterted into the name, category, description parameters.

• CWE-79

• https://github.com/truonghuuphuc/CVEThird Party Advisory
• https://github.com/truonghuuphuc/CVE/blob/main/CVE-2022-23871.pdfExploit, Third Party Advisory
• https://github.com/truonghuuphuc/CVEThird Party Advisory
• https://github.com/truonghuuphuc/CVE/blob/main/CVE-2022-23871.pdfExploit, Third Party Advisory

Published

Feb 3, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23862A Local Privilege Escalation issue was discovered in Y Soft …7.8
• CVE-2022-23863Zoho ManageEngine Desktop Central before 10.1.2137.10 allows…6.5
• CVE-2022-23865Nyron 1.0 is affected by a SQL injection vulnerability throu…9.8
• CVE-2022-23868RuoYi v4.7.2 contains a CSV injection vulnerability through …7.8
• CVE-2022-23869In RuoYi v4.7.2 through the WebUI, user test1 does not have …6.5
• CVE-2022-2387The Easy Digital Downloads WordPress plugin before 3.0 does …4.3
• CVE-2022-23872Emlog pro v1.1.1 was discovered to contain a stored cross-si…4.8
• CVE-2022-23873Victor CMS v1.0 was discovered to contain a SQL injection vu…8.8
• CVE-2022-23878seacms V11.5 is affected by an arbitrary code execution vuln…9.8
• CVE-2022-2388The WP Coder WordPress plugin before 2.5.3 does not have CSR…6.5
• CVE-2022-23880An arbitrary file upload vulnerability in the File Managemen…9.8
• CVE-2022-23881ZZZCMS zzzphp v2.1.0 was discovered to contain a remote comm…9.8