CVE-2022-39181

GLPI - Reports plugin for GLPI Reflected Cross-Site-Scripting (RXSS). Type 1: Reflected XSS (or Non-Persistent) - The server reads data directly from the HTTP request and reflects it back in the HTTP response. Reflected XSS exploits occur when an attacker causes a victim to supply dangerous content to a vulnerable web application, which is then reflected back to the victim and executed by the web browser. The most common mechanism for delivering malicious content is to include it as a parameter in a URL that is posted publicly or emailed directly to the victim. URLs constructed in this manner constitute the core of many phishing schemes, whereby an attacker convinces a victim to visit a URL that refers to a vulnerable site. After the site reflects the attacker's content back to the victim, the content is executed by the victim's browser.

• CWE-79
• CWE-79

• https://www.gov.il/en/Departments/faq/cve_advisories
• https://www.gov.il/en/Departments/faq/cve_advisories

Published

Nov 17, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-39176BlueZ before 5.59 allows physically proximate attackers to o…8.8
• CVE-2022-39177BlueZ before 5.59 allows physically proximate attackers to c…8.8
• CVE-2022-39178 Webvendome - webvendome Internal Server IP Disclosure. Send…5.3
• CVE-2022-39179 College Management System v1.0 - Authenticated remote code …7.2
• CVE-2022-3918A program using FoundationNetworking in swift-corelibs-found…8.8
• CVE-2022-39180 College Management System v1.0 - SQL Injection (SQLi). By i…9.8
• CVE-2022-39182H C Mingham-Smith Ltd - Tardis 2000 Privilege escalation.Ver…8.8
• CVE-2022-39183Moodle Plugin - SAML Auth may allow Open Redirect through un…6.1
• CVE-2022-39184EXFO - BV-10 Performance Endpoint Unit authentication bypass…9.8
• CVE-2022-39185EXFO - BV-10 Performance Endpoint Unit Undocumented privileg…9.8
• CVE-2022-39186EXFO - BV-10 Performance Endpoint Unit misconfiguration. Sys…5.5
• CVE-2022-39187Rumpus - FTP server version 9.0.7.1 has a Reflected cross-si…6.1