# CVEs published 2022-04-25

79 CVEs were published on April 25, 2022: 1 critical, 8 high. Days are UTC.

- [CVE-2022-24880](https://cve.now/CVE-2022-24880.md): Potential Captcha Validate Bypass in flask-session-captcha (CVSS 5.3, Tethik flask-session-captcha · flask-session-captcha)
- [CVE-2021-35250](https://cve.now/CVE-2021-35250.md): Directory Transversal Vulnerability in Serv-U 15.3 (CVSS 7.5, SolarWinds Serv-U)
- [CVE-2022-25866](https://cve.now/CVE-2022-25866.md): Command Injection (CVSS 8.1, czproject/git-php)
- [CVE-2022-29419](https://cve.now/CVE-2022-29419.md): WordPress 3xSocializer plugin \<= 0.98.22 - Authenticated SQL Injection (SQLi) vulnerability (CVSS 6.0, Don Crowther 3xSocializer)
- [CVE-2022-29418](https://cve.now/CVE-2022-29418.md): WordPress Night Mode plugin \<= 1.0.0 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability (CVSS 4.8, Mark Daniels Night Mode)
- [CVE-2022-29417](https://cve.now/CVE-2022-29417.md): WordPress ShortPixel Adaptive Images plugin \<= 3.3.1 - Subscriber+ Plugin Settings Update vulnerability (CVSS 4.3, ShortPixel Adaptive Images)
- [CVE-2022-0477](https://cve.now/CVE-2022-0477.md): An issue has been discovered in GitLab affecting all versions starting from 11.9 before 14.5.4, all versions starting from 14.6.0 before 14. (CVSS 4.9, GitLab)
- [CVE-2022-28290](https://cve.now/CVE-2022-28290.md): Reflective Cross-Site Scripting vulnerability in WordPress Country Selector Plugin Version 1.6.5. (no CVSS, WordPress Country Selector Plugin)
- [CVE-2022-1396](https://cve.now/CVE-2022-1396.md): Donorbox \< 7.1.7 - Admin+ Stored Cross-Site Scripting (no CVSS, Donorbox – Free Recurring Donation Form)
- [CVE-2022-1392](https://cve.now/CVE-2022-1392.md): Videos sync PDF \<= 1.7.4 - Unauthenticated LFI (no CVSS, Videos sync PDF)
- [CVE-2022-1391](https://cve.now/CVE-2022-1391.md): Cab fare calculator \< 1.0.4 - Unauthenticated LFI (no CVSS, Cab fare calculator)
- [CVE-2022-1390](https://cve.now/CVE-2022-1390.md): Admin Word Count Column \<= 2.2 - Unauthenticated Arbitrary File Read (no CVSS, Admin Word Count Column)
- [CVE-2022-1228](https://cve.now/CVE-2022-1228.md): Opensea \< 1.0.3 - Admin+ Stored XSS (no CVSS, Opensea)
- [CVE-2022-1156](https://cve.now/CVE-2022-1156.md): Books & Papers \<= 0.20210223 - Admin+ Stored Cross-Site Scripting (no CVSS, Books & Papers)
- [CVE-2022-1153](https://cve.now/CVE-2022-1153.md): LayerSlider \< 7.1.2 - Admin+ Stored Cross-Site Scripting (no CVSS, LayerSlider)
- [CVE-2022-1152](https://cve.now/CVE-2022-1152.md): Menubar \< 5.8 - Reflected Cross-Site Scripting (no CVSS, Menubar)
- [CVE-2022-1094](https://cve.now/CVE-2022-1094.md): Amr Users \< 4.59.4 - Admin+ Stored Cross-Site Scripting (CVSS 4.8, amr users)
- [CVE-2022-1092](https://cve.now/CVE-2022-1092.md): myCred \< 2.4.4 - Subscriber+ Import/Export to Email Address Disclosure (no CVSS, myCred)
- [CVE-2022-1027](https://cve.now/CVE-2022-1027.md): Page Restriction WordPress \< 1.2.7 - Admin+ Stored Cross-Site Scripting (no CVSS, Page Restriction WordPress (WP) – Protect WP Pages/Post)
- [CVE-2022-0953](https://cve.now/CVE-2022-0953.md): Anti-Malware Security and Brute-Force Firewall \< 4.20.96 - Reflected Cross-Site Scripting (no CVSS, Anti-Malware Security and Brute-Force Firewall)
- [CVE-2022-0876](https://cve.now/CVE-2022-0876.md): Social comments by WpDevArt \< 2.5.0 - Admin+ Stored Cross-Site Scripting (no CVSS, Social comments by WpDevArt)
- [CVE-2022-0782](https://cve.now/CVE-2022-0782.md): Donations \<= 1.8 - Unauthenticated SQLi (no CVSS, Donations)
- [CVE-2022-0769](https://cve.now/CVE-2022-0769.md): Users Ultra \<= 3.1.0 - Unauthenticated SQL Injection (no CVSS, Users Ultra Membership, Users Community and Member Profiles…)
- [CVE-2022-0693](https://cve.now/CVE-2022-0693.md): Master Elements \<= 8.0 - Unauthenticated SQLi (no CVSS, Master Elements)
- [CVE-2022-0657](https://cve.now/CVE-2022-0657.md): 5 Stars Rating Funnel \< 1.2.53 - Unauthenticated SQLi (no CVSS, 5 Stars Rating Funnel WordPress Plugin | RRatingg)
- [CVE-2022-0656](https://cve.now/CVE-2022-0656.md): uDraw \< 3.3.3 - Unauthenticated Arbitrary File Access (no CVSS, Web To Print Shop : uDraw)
- [CVE-2022-0634](https://cve.now/CVE-2022-0634.md): ThirstyAffiliates \< 3.10.5 - Subscriber+ unauthorized image upload + CSRF (no CVSS, ThirstyAffiliates)
- [CVE-2022-0541](https://cve.now/CVE-2022-0541.md): Flo Launch \< 2.4.1 - Missing Authentication Allow Full Site Takeover (no CVSS, flo-launch)
- [CVE-2022-0398](https://cve.now/CVE-2022-0398.md): ThirstyAffiliates Affiliate Link Manager \< 3.10.5 - Subscriber+ Arbitrary Affiliate Links Creation (no CVSS, ThirstyAffiliates Affiliate Link Manager)
- [CVE-2022-0363](https://cve.now/CVE-2022-0363.md): myCred \< 2.4.4 - Subscriber+ Arbitrary Post Creation (no CVSS, myCred)
- [CVE-2022-0287](https://cve.now/CVE-2022-0287.md): Mycred \< 2.4.4.1 - Subscriber+ User E-mail Addresses Disclosure (no CVSS, myCred)
- [CVE-2021-4225](https://cve.now/CVE-2021-4225.md): SP Project & Document Manager \< 4.24 - Subscriber+ Shell Upload (no CVSS, SP Project & Document Manager)
- [CVE-2021-46782](https://cve.now/CVE-2021-46782.md): Pricing Table by Supsystic \< 1.9.5 - Reflected Cross-Site Scripting (no CVSS, Pricing Table by Supsystic)
- [CVE-2021-46781](https://cve.now/CVE-2021-46781.md): Coming Soon by Supsystic \< 1.7.6 - Reflected Cross-Site Scripting (no CVSS, Coming Soon by Supsystic)
- [CVE-2021-46780](https://cve.now/CVE-2021-46780.md): Easy Google Maps \< 1.9.32 - Reflected Cross-Site Scripting (no CVSS, Easy Google Maps)
- [CVE-2021-25111](https://cve.now/CVE-2021-25111.md): English WordPress Admin \< 1.5.2 - Unauthenticated Open Redirect (no CVSS, English WordPress Admin)
- [CVE-2021-25094](https://cve.now/CVE-2021-25094.md): Tatsu \< 3.3.12 - Unauthenticated RCE (no CVSS, Tatsu)
- [CVE-2021-24957](https://cve.now/CVE-2021-24957.md): Advanced Page Visit Counter \< 6.1.6 - Subscriber+ Blind SQL injection (no CVSS, Advanced Page Visit Counter – Advanced WordPress Visit Coun…)
- [CVE-2021-24805](https://cve.now/CVE-2021-24805.md): DW Question & Answer Pro \<= 1.3.4 - Multiple CSRF (no CVSS, DW Question Answer Pro)
- [CVE-2021-24800](https://cve.now/CVE-2021-24800.md): DW Question & Answer Pro \<= 1.3.4 - Arbitrary Comment Edition via IDOR (no CVSS, DW Question Answer Pro)
- [CVE-2022-27374](https://cve.now/CVE-2022-27374.md): Tenda AX12 V22.03.01.21\_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via the function sub\_42E328 at /goform/SysToolReboo (no CVSS)
- [CVE-2022-27375](https://cve.now/CVE-2022-27375.md): Tenda AX12 V22.03.01.21\_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via the function sub\_422168 at /goform/WifiExtraSet (no CVSS)
- [CVE-2022-26596](https://cve.now/CVE-2022-26596.md): Cross-site scripting (XSS) vulnerability in Journal module's web content display configuration page in Liferay Portal 7.1.0 through 7.3.3, a (no CVSS, com.liferay:com.liferay.journal.content.web · com.liferay.p…)
- [CVE-2022-22392](https://cve.now/CVE-2022-22392.md): IBM Planning Analytics Local 2.0 could allow an attacker to upload arbitrary executable files which, when executed by an unsuspecting victim (CVSS 6.8, IBM Planning Analytics Workspace)
- [CVE-2021-39040](https://cve.now/CVE-2021-39040.md): IBM Planning Analytics Workspace 2.0 could be vulnerable to malicious file upload by not validating the file types or sizes. (CVSS 6.3, IBM Planning Analytics Workspace)
- [CVE-2022-26597](https://cve.now/CVE-2022-26597.md): Cross-site scripting (XSS) vulnerability in the Layout module's Open Graph integration in Liferay Portal 7.3.0 through 7.4.0, and Liferay DX (no CVSS, com.liferay:com.liferay.layout.seo.web · com.liferay.portal…)
- [CVE-2022-26111](https://cve.now/CVE-2022-26111.md): The BeanShell components of IRISNext through 9.8.28 allow execution of arbitrary commands on the target server by creating a custom search ( (no CVSS)
- [CVE-2022-29078](https://cve.now/CVE-2022-29078.md): The ejs (aka Embedded JavaScript templates) package 3.1.6 for Node.js allows server-side template injection in settings\[view options\]\[output (no CVSS, ejs)
- [CVE-2022-28094](https://cve.now/CVE-2022-28094.md): SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the fid parameter (no CVSS)
- [CVE-2022-28093](https://cve.now/CVE-2022-28093.md): SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a local file inclusion vulnerability which allow attackers to exe (no CVSS)
- [CVE-2022-27311](https://cve.now/CVE-2022-27311.md): Gibbon v3.4.4 and below allows attackers to execute a Server-Side Request Forgery (SSRF) via a crafted URL. (no CVSS, gibbon)
- [CVE-2022-28506](https://cve.now/CVE-2022-28506.md): There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45. (no CVSS)
- [CVE-2022-27135](https://cve.now/CVE-2022-27135.md): xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc. (no CVSS)
- [CVE-2022-28053](https://cve.now/CVE-2022-28053.md): Typemill v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the upload function. (no CVSS)
- [CVE-2022-27429](https://cve.now/CVE-2022-27429.md): Jizhicms v1.9.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via /admin.php/Plugins/update.html. (no CVSS)
- [CVE-2022-27428](https://cve.now/CVE-2022-27428.md): A stored cross-site scripting (XSS) vulnerability in /index.php/album/add of GalleryCMS v2.0 allows attackers to execute arbitrary web scrip (no CVSS)
- [CVE-2022-28586](https://cve.now/CVE-2022-28586.md): XSS in edit page of Hoosk 1.8.0 allows attacker to execute javascript code in user browser via edit page with XSS payload bypass filter some (no CVSS)
- [CVE-2022-27103](https://cve.now/CVE-2022-27103.md): element-plus 2.0.5 is vulnerable to Cross Site Scripting (XSS) via el-table-column. (no CVSS, element-plus)
- [CVE-2021-36460](https://cve.now/CVE-2021-36460.md): VeryFitPro (com.veryfit2hr.second) 3.2.8 hashes the account's password locally on the device and uses the hash to authenticate in all commun (no CVSS)
- [CVE-2021-45836](https://cve.now/CVE-2021-45836.md): An authenticated attacker can execute arbitrary commands as root in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517) by injecting a (no CVSS)
- [CVE-2021-45840](https://cve.now/CVE-2021-45840.md): It is possible to execute arbitrary commands as root in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517) by sending specifically cra (no CVSS)
- [CVE-2021-45842](https://cve.now/CVE-2021-45842.md): It is possible to obtain the first administrator's hash set up in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517) on the system as (no CVSS)
- [CVE-2022-1461](https://cve.now/CVE-2022-1461.md): Non Privilege User can Enable or Disable Registered in openemr/openemr (CVSS 8.1, openemr/openemr)
- [CVE-2022-28871](https://cve.now/CVE-2022-28871.md): Denial-of-Service (DoS) Vulnerability (CVSS 4.3, All F-Secure Endpoint Protection products on Windows and Ma…)
- [CVE-2022-1459](https://cve.now/CVE-2022-1459.md): Non-Privilege User Can View Patient’s Disclosures in openemr/openemr (CVSS 8.3, openemr/openemr)
- [CVE-2022-1458](https://cve.now/CVE-2022-1458.md): Stored XSS Leads To Session Hijacking in openemr/openemr (CVSS 7.3, openemr/openemr)
- [CVE-2022-1457](https://cve.now/CVE-2022-1457.md): Store XSS in title parameter executing at EditUser Page & EditProducto page in neorazorx/facturascripts (CVSS 9.0, neorazorx/facturascripts)
- [CVE-2022-29264](https://cve.now/CVE-2022-29264.md): An issue was discovered in coreboot 4.13 through 4.16. (no CVSS)
- [CVE-2021-40680](https://cve.now/CVE-2021-40680.md): There is a Directory Traversal vulnerability in Artica Proxy (4.30.000000 SP206 through SP255, and VMware appliance 4.30.000000 through SP27 (CVSS 8.1)
- [CVE-2022-29603](https://cve.now/CVE-2022-29603.md): A SQL Injection vulnerability exists in UniverSIS UniverSIS-API through 1.2.1 via the $select parameter to multiple API endpoints. (no CVSS)
- [CVE-2019-25059](https://cve.now/CVE-2019-25059.md): Artifex Ghostscript through 9.26 mishandles .completefont. (no CVSS)
- [CVE-2022-29077](https://cve.now/CVE-2022-29077.md): A heap-based buffer overflow exists in rippled before 1.8.5. (no CVSS)
- [CVE-2022-29546](https://cve.now/CVE-2022-29546.md): HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial of service vulnerability. (no CVSS, net.sourceforge.htmlunit:neko-htmlunit)
- [CVE-2021-45837](https://cve.now/CVE-2021-45837.md): It is possible to execute arbitrary commands as root in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517) by sending a specifically c (no CVSS)
- [CVE-2021-45839](https://cve.now/CVE-2021-45839.md): It is possible to obtain the first administrator's hash set up on the system in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517) as (no CVSS)
- [CVE-2021-45841](https://cve.now/CVE-2021-45841.md): In Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517), an attacker can self-sign session cookies by knowing the target's MAC address a (no CVSS)
- [CVE-2022-1441](https://cve.now/CVE-2022-1441.md): MP4Box is a component of GPAC-2.0.0, which is a widely-used third-party package on RPM Fusion. (no CVSS, gpac)
- [CVE-2022-23457](https://cve.now/CVE-2022-23457.md): Path Traversal in ESAPI (CVSS 7.5, OWASP ESAPI org.owasp.esapi:esapi · org.owasp.esapi:esapi)
- [CVE-2022-24792](https://cve.now/CVE-2022-24792.md): Potential infinite loop when parsing WAV format file in PJSIP (CVSS 7.5, pjsip pjproject)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-04-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.