CVE-2022-43670

An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.0 and prior may allow an authenticated remote attacker to perform a reflected cross site scripting (XSS) attack in the taxonomy management feature.

• CWE-79

• http://www.openwall.com/lists/oss-security/2022/11/02/8Mailing List, Third Party Advisory
• https://lists.apache.org/thread/o68l3l3crfxz107fr9dm74y8vg8kj2csIssue Tracking, Mailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2022/11/02/8Mailing List, Third Party Advisory
• https://lists.apache.org/thread/o68l3l3crfxz107fr9dm74y8vg8kj2csIssue Tracking, Mailing List, Vendor Advisory

Published

Nov 2, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-43665A denial of service vulnerability exists in the malware scan…5.5
• CVE-2022-43666Exposure of sensitive system information due to uncleared de…5.5
• CVE-2022-43667Stack-based buffer overflow vulnerability exists in CX-Progr…7.8
• CVE-2022-43668Typora versions prior to 1.4.4 fails to properly neutralize …6.1
• CVE-2022-43669Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2022-4367Rejected reason: Duplicate, use CVE-2023-4279 instead.
• CVE-2022-43671Zoho ManageEngine Password Manager Pro before 12122, PAM360 …9.8
• CVE-2022-43672Zoho ManageEngine Password Manager Pro before 12122, PAM360 …9.8
• CVE-2022-43673Wire through 3.22.3993 on Windows advertises deletion of sen…4.7
• CVE-2022-43675An issue was discovered in NOKIA NFM-T R19.9. Reflected XSS …6.1
• CVE-2022-43677In free5GC 3.2.1, a malformed NGAP message can crash the AMF…5.5
• CVE-2022-43679The Docker image of ownCloud Server through 10.11 contains a…5.3