CVE-2022-4582

A vulnerability was found in starter-public-edition-4 up to 4.6.10. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 4.6.11 is able to address this issue. The name of the patch is 2606983c20f6ea3430ac4b36b3d2e88aafef45da. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216168.

• CWE-707

• https://github.com/ivantcholakov/starter-public-edition-4/commit/2606983c20f6ea3430ac4b36b3d2e88aafef45daPatch, Third Party Advisory
• https://github.com/ivantcholakov/starter-public-edition-4/releases/tag/v4.6.11Release Notes, Third Party Advisory
• https://vuldb.com/?id.216168Third Party Advisory
• https://github.com/ivantcholakov/starter-public-edition-4/commit/2606983c20f6ea3430ac4b36b3d2e88aafef45daPatch, Third Party Advisory
• https://github.com/ivantcholakov/starter-public-edition-4/releases/tag/v4.6.11Release Notes, Third Party Advisory
• https://vuldb.com/?id.216168Third Party Advisory

Published

Dec 17, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-45814Stored Cross-Site Scripting (XSS) vulnerability in Fabian vo…5.4
• CVE-2022-45815Cross-Site Request Forgery (CSRF) vulnerability in StylemixT…8.8
• CVE-2022-45816Auth. Stored Cross-Site Scripting (XSS) vulnerability in GD …5.4
• CVE-2022-45817Cross-Site Scripting (XSS) vulnerability in Erin Garscadden …6.1
• CVE-2022-45818Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulne…5.4
• CVE-2022-45819Missing Authorization vulnerability in Popup Maker Popup Mak…3.5
• CVE-2022-45820SQL Injection (SQLi) vulnerability in LearnPress – WordPress…8.8
• CVE-2022-45821Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulne…5.4
• CVE-2022-45822Unauth. SQL Injection (SQLi) vulnerability in Advanced Booki…9.8
• CVE-2022-45823Cross-Site Request Forgery (CSRF) vulnerability in GalleryPl…8.8
• CVE-2022-45824Cross-Site Request Forgery (CSRF) vulnerability in Advanced …6.5
• CVE-2022-45825Unauth. Reflected Cross-Site Scripting (XSS) vulnerability i…6.1