CVE-2022-4614 LOW

CVE-2022-4614: Cross-site Scripting (XSS) - Stored in alagrede/znote-app

Vendor Alagrede
Product alagrede/znote-app
Weakness CWE-79 · XSS
Published December 19, 2022
Last update April 14, 2025
View on NVD All CVEs

CVSS base score

2.3/10
Attack vector Local
Attack complexity High
Privileges required High
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:N

What the vulnerability does

01Description

Cross-site Scripting (XSS) - Stored in GitHub repository alagrede/znote-app prior to 1.7.11.

Key dates

02Disclosure timeline

December 19, 2022 CVE published
April 14, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-1242 Premium Addons for Elementor <= 4.10.18 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-23852 WordPress First Comment Redirect plugin <= 1.0.3 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-5409 Cross-site Scripting vulnerability in RhinOS from SaltOS CVE-2024-37100 WordPress Elegant Themes Icons plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability CVE-2025-67536 WordPress LearnPress plugin <= 4.2.9.4 - Cross Site Scripting (XSS) vulnerability