CVE-2022-30690

A cross-site scripting (xss) vulnerability exists in the image403 functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger this vulnerability.

• CWE-79

• https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sqlThird Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1539Exploit, Technical Description, Third Party Advisory
• https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sqlThird Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1539Exploit, Technical Description, Third Party Advisory

Published

Aug 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-30685Adobe Experience Manager versions 6.5.13.0 (and earlier) is …5.4
• CVE-2022-30686Adobe Experience Manager versions 6.5.13.0 (and earlier) is …5.4
• CVE-2022-30687Trend Micro Maximum Security 2022 is vulnerable to a link fo…7.1
• CVE-2022-30688needrestart 0.8 through 3.5 before 3.6 is prone to local pri…7.8
• CVE-2022-30689HashiCorp Vault and Vault Enterprise from 1.10.0 to 1.10.2 d…5.3
• CVE-2022-3069The WordLift WordPress plugin before 3.37.2 does not sanitis…4.8
• CVE-2022-30691Uncontrolled resource consumption in the Intel(R) Support An…5.5
• CVE-2022-30692Improper conditions check in the Intel(R) SUR software befor…7.5
• CVE-2022-30693Information disclosure vulnerability in the system configura…5.3
• CVE-2022-30694The login endpoint /FormLogin in affected web services does …6.5
• CVE-2022-30695Local privilege escalation due to excessive permissions assi…7.8
• CVE-2022-30696Local privilege escalation due to a DLL hijacking vulnerabil…7.8