CVE-2022-0780

SearchIQ < 3.9 - Unauthenticated Stored XSS

The SearchIQ WordPress plugin before 3.9 contains a flag to disable the verification of CSRF nonces, granting unauthenticated attackers access to the siq_ajax AJAX action and allowing them to perform Cross-Site Scripting attacks due to the lack of sanitisation and escaping in the customCss parameter

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Searchiq

Products

Searchiq

CVE-2022-0779

User Meta < 2.4.4 - Subscriber+ Local File Enumeration via Path Traversal

The User Meta WordPress plugin before 2.4.4 does not validate the filepath parameter of its um_show_uploaded_file AJAX action, which could allow low privileged users such as subscriber to enumerate the local files on the web server via path traversal payloads

CVSS 3.1 · 6.5 Medium EPSS 2.4% KEV · Not listed

Vendors

User-meta

Products

User Meta User Profile Builder And User Management

CVE-2022-0777

Weak Password Recovery Mechanism for Forgotten Password in microweber/microweber

Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed

Vendors

Microweber

Products

Microweber

CVE-2022-0776

Cross-site Scripting (XSS) - DOM in hakimel/reveal.js

Cross-site Scripting (XSS) - DOM in GitHub repository hakimel/reveal.js prior to 4.3.0.

CVSS 3.1 · 6.1 Medium EPSS 3.7% KEV · Not listed

Vendors

Revealjs

Products

Reveal.js

CVE-2022-0773

Documentor <= 1.5.3 - Unauthenticated SQLi

The Documentor WordPress plugin through 1.5.3 fails to sanitize and escape user input before it is being interpolated in an SQL statement and then executed, leading to an SQL Injection exploitable by unauthenticated users.

CVSS 3.1 · 9.8 Critical EPSS 43.3% KEV · Not listed

Vendors

Documentor Project

Products

Documentor

CVE-2022-0772

Cross-site Scripting (XSS) - Stored in librenms/librenms

Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.2.2.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Librenms

Products

Librenms

CVE-2022-0771

SiteSuperCharger < 5.2.0 - Unauthenticated SQLi

The SiteSuperCharger WordPress plugin before 5.2.0 does not validate, sanitise and escape various user inputs before using them in SQL statements via AJAX actions (available to both unauthenticated and authenticated users), leading to Unauthenticated SQL Injections

CVSS 3.1 · 9.8 Critical EPSS 1.6% KEV · Not listed

Vendors

Marketingheroes

Products

Sitesupercharger

CVE-2022-0770

Translate WordPress with GTranslate < 2.9.9 - CSRF to Account Takeover

The Translate WordPress with GTranslate WordPress plugin before 2.9.9 does not have CSRF check in some files, and write debug data such as user's cookies in a publicly accessible file if a specific parameter is used when requesting them. Combining those two issues, an attacker could gain access to a logged in admin cookies by making them open a malicious link or page

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Gtranslate

Products

Translate Wordpress With Gtranslate

CVE-2022-0769

Users Ultra <= 3.1.0 - Unauthenticated SQL Injection

The Users Ultra WordPress plugin through 3.1.0 fails to properly sanitize and escape the data_target parameter before it is being interpolated in an SQL statement and then executed via the rating_vote AJAX action (available to both unauthenticated and authenticated users), leading to an SQL Injection.

CVSS 3.1 · 9.8 Critical EPSS 8.3% KEV · Not listed

Vendors

Usersultra

Products

Users Ultra

CVE-2022-0768

Server-Side Request Forgery (SSRF) in rudloff/alltube

Server-Side Request Forgery (SSRF) in GitHub repository rudloff/alltube prior to 3.0.2.

CVSS 3.1 · 9.1 Critical EPSS 1.6% KEV · Not listed

Vendors

Alltubedownload

Products

Alltube

CVE-2022-0767

Server-Side Request Forgery (SSRF) in janeczku/calibre-web

Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.17.

CVSS 3.1 · 9.9 Critical EPSS < 1% KEV · Not listed

Vendors

Janeczku

Products

Calibre-web

CVE-2022-0766

Server-Side Request Forgery (SSRF) in janeczku/calibre-web

Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.17.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed

Vendors

Janeczku

Products

Calibre-web

CVE-2022-0765

Loco Translate < 2.6.1 - Authenticated Stored Cross-Site Scripting

The Loco Translate WordPress plugin before 2.6.1 does not properly remove inline events from elements in the source translation strings before outputting them in the editor in the plugin admin panel, allowing any user with access to the plugin (Translator and Administrator by default) to add arbitrary javascript payloads to the source strings leading to a stored cross-site scripting (XSS) vulnerability.

CVSS 3.1 · 5.4 Medium EPSS 3.8% KEV · Not listed

Vendors

Loco Translate Project

Products

Loco Translate

CVE-2022-0764

Arbitrary Command Injection in strapi/strapi

Arbitrary Command Injection in GitHub repository strapi/strapi prior to 4.1.0.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Strapi

Products

Strapi

CVE-2022-0763

Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Microweber

Products

Microweber

CVE-2022-0760

Simple Link Directory < 7.7.2 - Unauthenticated SQL injection

The Simple Link Directory WordPress plugin before 7.7.2 does not validate and escape the post_id parameter before using it in a SQL statement via the qcopd_upvote_action AJAX action (available to unauthenticated and authenticated users), leading to an unauthenticated SQL Injection

CVSS 3.1 · 9.8 Critical EPSS 10.8% KEV · Not listed

Vendors

Quantumcloud

Products

Simple Link Directory

CVE-2022-0759

kubeclient: kubeconfig parsing error can lead to MITM attacks

A flaw was found in all versions of kubeclient up to (but not including) v4.9.3, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfig files. When the kubeconfig file does not configure custom CA to verify certs, kubeclient ends up accepting any certificate (it wrongly returns VERIFY_NONE). Ruby applications that leverage kubeclient to parse kubeconfig files are susceptible to Man-in-the-middle attacks (MITM).

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed

Vendors

Redhat

Products

Kubeclient Logging Satellite

CVE-2022-0758

Rapid7 Nexpose Reflected XSS

Rapid7 Nexpose versions 6.6.129 and earlier suffer from a reflected cross site scripting vulnerability, within the shared scan configuration component of the tool. With this vulnerability an attacker could pass literal values as the test credentials, providing the opportunity for a potential XSS attack. This issue is fixed in Rapid7 Nexpose version 6.6.130.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Rapid7

Products

Nexpose

CVE-2022-0757

Rapid7 Nexpose SQL Injection

Rapid7 Nexpose versions 6.6.93 and earlier are susceptible to an SQL Injection vulnerability, whereby valid search operators are not defined. This lack of validation can allow a logged-in, authenticated attacker to manipulate the "ANY" and "OR" operators in the SearchCriteria and inject SQL code. This issue was fixed in Rapid7 Nexpose version 6.6.129.

CVSS 3.1 · 5.5 Medium EPSS 1.2% KEV · Not listed

Vendors

Rapid7

Products

Nexpose

CVE-2022-0756

Missing Authorization in salesagility/suitecrm

Missing Authorization in GitHub repository salesagility/suitecrm prior to 7.12.5.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Salesagility

Products

Suitecrm