CVE-2022-40844

In Tenda (Shenzhen Tenda Technology Co., Ltd) AC1200 Router model W15Ev2 V15.11.0.10(1576), a Stored Cross Site Scripting (XSS) issue exists allowing an attacker to execute JavaScript code via the applications website filtering tab, specifically the URL body.

• CWE-79
• CWE-79

• https://boschko.ca/tenda_ac1200_router/Exploit, Technical Description, Third Party Advisory
• https://boschko.ca/tenda_ac1200_router/Exploit, Technical Description, Third Party Advisory

Published

Nov 15, 2022

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-40839A SQL injection vulnerability in the height and width parame…7.5
• CVE-2022-4084Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-40840ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerabl…6.1
• CVE-2022-40841A cross-site scripting (XSS) vulnerability in NdkAdvancedCus…6.1
• CVE-2022-40842ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerabl…9.1
• CVE-2022-40843The Tenda AC1200 V-W15Ev2 V15.11.0.10(1576) router is vulner…4.9
• CVE-2022-40845The Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576) is af…6.5
• CVE-2022-40846In Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576), a Sto…4.8
• CVE-2022-40847In Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576), there…7.8
• CVE-2022-40849ThinkCMF version 6.0.7 is affected by Stored Cross-Site Scri…5.4
• CVE-2022-4085Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-40851Tenda AC15 V15.03.05.19 contained a stack overflow via the f…9.8