CVE-2022-4598

A vulnerability has been found in Shoplazza LifeStyle 1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/api/theme-edit/ of the component Announcement Handler. The manipulation of the argument Text/Mobile Text leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-216193 was assigned to this vulnerability.

• CWE-707
• CWE-79

• https://seclists.org/fulldisclosure/2022/Dec/11Mailing List, Third Party Advisory
• https://seclists.org/fulldisclosure/2022/Dec/att-11/proof-of-concept-shoplazza.txtMailing List, Third Party Advisory
• https://vuldb.com/?id.216193Third Party Advisory
• https://seclists.org/fulldisclosure/2022/Dec/11Mailing List, Third Party Advisory
• https://seclists.org/fulldisclosure/2022/Dec/att-11/proof-of-concept-shoplazza.txtMailing List, Third Party Advisory
• https://vuldb.com/?id.216193Third Party Advisory

Published

Dec 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-45968Alist v3.4.0 is vulnerable to File Upload. A user with only …8.8
• CVE-2022-45969Alist v3.4.0 is vulnerable to Directory Traversal,9.8
• CVE-2022-4597A vulnerability, which was classified as problematic, was fo…5.4
• CVE-2022-45970Alist v3.5.1 is vulnerable to Cross Site Scripting (XSS) via…5.4
• CVE-2022-45977Tenda AX12 V22.03.01.21_CN was found to have a command injec…8.8
• CVE-2022-45979Tenda AX12 v22.03.01.21_CN was discovered to contain a stack…7.5
• CVE-2022-45980Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross…8.8
• CVE-2022-45982thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserializa…9.8
• CVE-2022-45988starsoftcomm CooCare 5.304 allows local attackers to escalat…7.8
• CVE-2022-4599A vulnerability was found in Shoplazza LifeStyle 1.1 and cla…5.4
• CVE-2022-45990A cross-site scripting (XSS) vulnerability in the component …6.1
• CVE-2022-45995There is an unauthorized buffer overflow vulnerability in Te…9.8