CVE-2022-4755

A vulnerability was found in FlatPress and classified as problematic. This issue affects the function main of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component Media Manager Plugin. The manipulation of the argument mm-newgallery-name leads to cross site scripting. The attack may be initiated remotely. The name of the patch is d3f329496536dc99f9707f2f295d571d65a496f5. It is recommended to apply a patch to fix this issue. The identifier VDB-216869 was assigned to this vulnerability.

• CWE-79

• https://github.com/flatpressblog/flatpress/commit/d3f329496536dc99f9707f2f295d571d65a496f5Patch, Third Party Advisory
• https://github.com/flatpressblog/flatpress/issues/177Issue Tracking, Patch, Third Party Advisory
• https://vuldb.com/?ctiid.216869Third Party Advisory
• https://vuldb.com/?id.216869Third Party Advisory
• https://github.com/flatpressblog/flatpress/commit/d3f329496536dc99f9707f2f295d571d65a496f5Patch, Third Party Advisory
• https://github.com/flatpressblog/flatpress/issues/177Issue Tracking, Patch, Third Party Advisory
• https://vuldb.com/?ctiid.216869Third Party Advisory
• https://vuldb.com/?id.216869Third Party Advisory

Published

Dec 27, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-4754The Easy Social Box / Page Plugin WordPress plugin through 4…5.4
• CVE-2022-47542Red Gate SQL Monitor 11.0.14 through 12.1.46 has Incorrect A…8.8
• CVE-2022-47543An issue was discovered in Siren Investigate before 12.1.7. …5.3
• CVE-2022-47544An issue was discovered in Siren Investigate before 12.1.7. …9.8
• CVE-2022-47547GossipSub 1.1, as used for Ethereum 2.0, allows a peer to ma…5.3
• CVE-2022-47549An unprotected memory-access operation in optee_os in Truste…6.4
• CVE-2022-47551Apiman 1.5.7 through 2.2.3.Final has insufficient checks for…6.5
• CVE-2022-47553Incorrect authorisation in ekorCCP and ekorRCI, which could …7.5
• CVE-2022-47554Exposure of sensitive information in ekorCCP and ekorRCI, po…7.5
• CVE-2022-47555Operating system command injection in ekorCCP and ekorRCI, w…8.8
• CVE-2022-47556Uncontrolled resource consumption in ekorRCI, allowing an at…6.5
• CVE-2022-47557Vulnerability in ekorCCP and ekorRCI that could allow an att…6.1