CVE-2022-48020

Vinteo VCC v2.36.4 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the conference parameter. This vulnerability allows attackers to inject arbitrary code which will be executed by the victim user's browser.

• CWE-79
• CWE-79

• https://seq.team/en/Not Applicable
• https://seq.team/en/blog/reflected-cross-site-scripting-xss-in-vinteo-vcc/Exploit, Third Party Advisory
• https://www.linkedin.com/in/dmitry-kiryukhin-b5741421b/Not Applicable
• https://seq.team/en/Not Applicable
• https://seq.team/en/blog/reflected-cross-site-scripting-xss-in-vinteo-vcc/Exploit, Third Party Advisory
• https://www.linkedin.com/in/dmitry-kiryukhin-b5741421b/Not Applicable

Published

May 12, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-48010LimeSurvey v5.4.15 was discovered to contain a stored cross-…5.4
• CVE-2022-48011Opencats v0.9.7 was discovered to contain a SQL injection vu…9.8
• CVE-2022-48012Opencats v0.9.7 was discovered to contain a reflected cross-…6.1
• CVE-2022-48013Opencats v0.9.7 was discovered to contain a stored cross-sit…5.4
• CVE-2022-48019The components wfshbr64.sys and wfshbr32.sys in Another Eden…7.8
• CVE-2022-4802Authorization Bypass Through User-Controlled Key in GitHub r…5.4
• CVE-2022-48021A vulnerability in Zammad v5.3.0 allows attackers to execute…9.8
• CVE-2022-48022An issue in the component /api/v1/mentions of Zammad v5.3.0 …4.3
• CVE-2022-48023Insufficient privilege verification in Zammad v5.3.0 allows …4.3
• CVE-2022-4803Authorization Bypass Through User-Controlled Key in GitHub r…8.8
• CVE-2022-4804Improper Authorization in GitHub repository usememos/memos p…5.3
• CVE-2022-4805Incorrect Use of Privileged APIs in GitHub repository usemem…4.3