CVE-2022-4561

A vulnerability classified as problematic has been found in SemanticDrilldown Extension. Affected is the function printFilterLine of the file includes/specials/SDBrowseDataPage.php of the component GET Parameter Handler. The manipulation of the argument value leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is 6e18cf740a4548166c1d95f6d3a28541d298a3aa. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-215964.

• CWE-707

• https://github.com/wikimedia/mediawiki-extensions-SemanticDrilldown/commit/6e18cf740a4548166c1d95f6d3a28541d298a3aaPatch, Third Party Advisory
• https://vuldb.com/?id.215964Permissions Required, Third Party Advisory
• https://github.com/wikimedia/mediawiki-extensions-SemanticDrilldown/commit/6e18cf740a4548166c1d95f6d3a28541d298a3aaPatch, Third Party Advisory
• https://vuldb.com/?id.215964Permissions Required, Third Party Advisory

Published

Dec 16, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-45597ComponentSpace.Saml2 4.4.0 Missing SSL Certificate Validatio…9.8
• CVE-2022-45598Cross Site Scripting vulnerability in Joplin Desktop App bef…6.1
• CVE-2022-45599Aztech WMB250AC Mesh Routers Firmware Version 016 2020 is vu…9.8
• CVE-2022-4560A vulnerability was found in Joget up to 7.0.31. It has been…6.1
• CVE-2022-45600Aztech WMB250AC Mesh Routers Firmware Version 016 2020 devic…8.8
• CVE-2022-45608An issue was discovered in ThingsBoard 3.4.1, allows low pri…8.8
• CVE-2022-45611An issue was discovered in Fresenius Kabi PharmaHelp 5.1.759…9.8
• CVE-2022-45613Book Store Management System v1.0 was discovered to contain …5.4
• CVE-2022-45614Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-4562The Meks Flexible Shortcodes WordPress plugin before 1.3.5 d…5.4
• CVE-2022-4563A vulnerability was found in Freedom of the Press SecureDrop…7.8
• CVE-2022-45634An issue discovered in MEGAFEIS, BOFEI DBD+ Application for …4.3