CVE-2022-4596

A vulnerability, which was classified as problematic, has been found in Shoplazza 1.1. This issue affects some unknown processing of the file /admin/api/admin/articles/ of the component Add Blog Post Handler. The manipulation of the argument Title leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-216191.

• CWE-707

• https://seclists.org/fulldisclosure/2022/Dec/11Mailing List, Third Party Advisory
• https://seclists.org/fulldisclosure/2022/Dec/att-11/proof-of-concept-shoplazza.txtExploit, Mailing List, Third Party Advisory
• https://vuldb.com/?id.216191Permissions Required, Third Party Advisory
• https://seclists.org/fulldisclosure/2022/Dec/11Mailing List, Third Party Advisory
• https://seclists.org/fulldisclosure/2022/Dec/att-11/proof-of-concept-shoplazza.txtExploit, Mailing List, Third Party Advisory
• https://vuldb.com/?id.216191Permissions Required, Third Party Advisory

Published

Dec 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-45939GNU Emacs through 28.2 allows attackers to execute commands …7.8
• CVE-2022-4594A vulnerability was found in drogatkin TJWS2. It has been de…9.8
• CVE-2022-45942A Remote Code Execution (RCE) vulnerability was found in inc…8.8
• CVE-2022-4595A vulnerability classified as problematic has been found in …6.1
• CVE-2022-45956Boa Web Server versions 0.94.13 through 0.94.14 fail to vali…5.3
• CVE-2022-45957ZTE ZXHN-H108NS router with firmware version H108NSV1.0.7u_Z…7.5
• CVE-2022-45962Open Solutions for Education, Inc openSIS Community Edition …6.5
• CVE-2022-45963h3c firewall <= 3.10 ESS6703 has a privilege bypass vulnerab…9.8
• CVE-2022-45966here is an arbitrary file upload vulnerability in the file m…9.8
• CVE-2022-45968Alist v3.4.0 is vulnerable to File Upload. A user with only …8.8
• CVE-2022-45969Alist v3.4.0 is vulnerable to Directory Traversal,9.8
• CVE-2022-4597A vulnerability, which was classified as problematic, was fo…5.4