CVE-2022-4091

A vulnerability was found in SourceCodester Canteen Management System. It has been classified as problematic. This affects the function query of the file food.php. The manipulation of the argument product_name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214359.

• CWE-707

• https://vuldb.com/?id.214359Permissions Required, Third Party Advisory
• https://www.jianshu.com/p/e977cda45d3c?v=1669360616628Exploit, Third Party Advisory
• https://vuldb.com/?id.214359Permissions Required, Third Party Advisory
• https://www.jianshu.com/p/e977cda45d3c?v=1669360616628Exploit, Third Party Advisory

Published

Nov 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-40896A ReDoS issue was discovered in pygments/lexers/smithy.py in…5.5
• CVE-2022-40897Python Packaging Authority (PyPA) setuptools before 65.5.1 a…5.9
• CVE-2022-40898An issue discovered in Python Packaging Authority (PyPA) Whe…7.5
• CVE-2022-40899An issue discovered in Python Charmers Future 0.18.2 and ear…7.5
• CVE-2022-4090A vulnerability was found in rickxy Stock Management System …8.8
• CVE-2022-40903Aiphone GT-DMB-N 3-in-1 Video Entrance Station with NFC Read…6.5
• CVE-2022-40912ETAP Lighting International NV ETAP Safety Manager 1.0.0.32 …6.1
• CVE-2022-40916Tiny File Manager v2.4.7 and below is vulnerable to session …9.8
• CVE-2022-40918Buffer overflow in firmware lewei_cam binary version 2.0.10 …9.8
• CVE-2022-4092An issue has been discovered in GitLab EE affecting all vers…8
• CVE-2022-40921DedeCMS V5.7.99 was discovered to contain an arbitrary file …7.2
• CVE-2022-40922A vulnerability in the LIEF::MachO::BinaryParser::init_and_p…6.5