CVE-2022-32074

A stored cross-site scripting (XSS) vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-FS before commit a7842d494889fd5533d13deb3c6a7789768795ae allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file.

• CWE-79

• https://github.com/osTicket/osTicket-pluginsProduct, Third Party Advisory
• https://github.com/osTicket/osTicket-plugins/commit/a7842d494889fd5533d13deb3c6a7789768795aePatch, Third Party Advisory
• https://owasp.org/www-community/attacks/xss/Third Party Advisory
• https://github.com/osTicket/osTicket-pluginsProduct, Third Party Advisory
• https://github.com/osTicket/osTicket-plugins/commit/a7842d494889fd5533d13deb3c6a7789768795aePatch, Third Party Advisory
• https://owasp.org/www-community/attacks/xss/Third Party Advisory

Published

Jul 13, 2022

Last Modified

Jul 10, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-3206The Passster WordPress plugin before 3.5.5.5.2 stores the pa…5.9
• CVE-2022-32060An arbitrary file upload vulnerability in the Update Brandin…4.8
• CVE-2022-32061An arbitrary file upload vulnerability in the Select User fu…4.8
• CVE-2022-32065An arbitrary file upload vulnerability in the background man…5.4
• CVE-2022-3207The Simple File List WordPress plugin before 4.4.12 does not…4.8
• CVE-2022-32073WolfSSH v1.4.7 was discovered to contain an integer overflow…9.8
• CVE-2022-3208The Simple File List WordPress plugin before 4.4.12 does not…6.5
• CVE-2022-32081MariaDB v10.4 to v10.7 was discovered to contain an use-afte…7.5
• CVE-2022-32082MariaDB v10.5 to v10.7 was discovered to contain an assertio…7.5
• CVE-2022-32083MariaDB v10.2 to v10.6.1 was discovered to contain a segment…7.5
• CVE-2022-32084MariaDB v10.2 to v10.7 was discovered to contain a segmentat…7.5
• CVE-2022-32085MariaDB v10.2 to v10.7 was discovered to contain a segmentat…7.5