CVE-2022-3464

A vulnerability classified as problematic has been found in puppyCMS up to 5.1. This affects an unknown part of the file /admin/settings.php. The manipulation of the argument site_name leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-210699.

• CWE-707
• CWE-79

• https://vuldb.com/?id.210699Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.210699Permissions Required, Third Party Advisory, VDB Entry

Published

Oct 12, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-34633CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a execute…5.5
• CVE-2022-34634CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a execute…5.5
• CVE-2022-34635The mstatus.sd field in CVA6 commit d315ddd0f1be27c1b3f27eb0…9.8
• CVE-2022-34636CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RIS…5.5
• CVE-2022-34637CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a impleme…5.5
• CVE-2022-34639CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a treats …5.5
• CVE-2022-34640The *tval of ecall/ebreak in CVA6 commit d315ddd0f1be27c1b3f…5.5
• CVE-2022-34641CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RIS…5.5
• CVE-2022-34642The component mcontrol.action in RISCV ISA Sim commit ac466a…5.5
• CVE-2022-34643RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b…5.5
• CVE-2022-34648Authenticated (author+) Stored Cross-Site Scripting (XSS) vu…5.4
• CVE-2022-34649Rejected reason: This CVE ID has been rejected or withdrawn …