CVE-2022-4892 LOW

CVE-2022-4892: MyCMS Visitors Module view.php build_view cross site scripting

Vendor N/A
Product MyCMS
Weakness CWE-79 · XSS
Published January 19, 2023
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

3.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

A vulnerability was found in MyCMS. It has been classified as problematic. This affects the function build_view of the file lib/gener/view.php of the component Visitors Module. The manipulation of the argument original/converted leads to cross site scripting. It is possible to initiate the attack remotely. The patch is named d64fcba4882a50e21cdbec3eb4a080cb694d26ee. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218895.

Key dates

02Disclosure timeline

January 19, 2023 CVE published
August 3, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-10909 Mangati NovoSGA SVG File admin cross site scripting CVE-2022-39270 Arbitrary HTML injection in table-of-contents theme component in DiscoTOC CVE-2025-57989 WordPress WordPress Widgets Shortcode Plugin <= 1.0.3 - Cross Site Scripting (XSS) Vulnerability CVE-2026-40787 WordPress Quiz And Survey Master plugin <= 11.0.0 - Cross Site Scripting (XSS) vulnerability CVE-2025-27102 Agate vulnerable to HTML injection in user signup - Administrator phishing risk