# CVEs published 2022-12-11

9 CVEs were published on December 11, 2022: 1 critical, 0 high. Days are UTC.

- [CVE-2022-4400](https://cve.now/CVE-2022-4400.md): zbl1996 FS-Blog Title cross site scripting (CVSS 3.5, zbl1996 FS-Blog)
- [CVE-2022-4401](https://cve.now/CVE-2022-4401.md): pallidlight online-course-selection-system cross site scripting (CVSS 3.5, pallidlight online-course-selection-system)
- [CVE-2022-4402](https://cve.now/CVE-2022-4402.md): RainyGao DocSys ZIP File Decompression path traversal (CVSS 4.7, RainyGao DocSys)
- [CVE-2022-4403](https://cve.now/CVE-2022-4403.md): SourceCodester Canteen Management System ajax\_represent.php sql injection (CVSS 6.3, SourceCodester Canteen Management System)
- [CVE-2022-4407](https://cve.now/CVE-2022-4407.md): Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq (CVSS 9.8, thorsten/phpmyfaq)
- [CVE-2022-4408](https://cve.now/CVE-2022-4408.md): Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq (CVSS 4.3, thorsten/phpmyfaq)
- [CVE-2022-4409](https://cve.now/CVE-2022-4409.md): Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaq (CVSS 6.3, thorsten/phpmyfaq)
- [CVE-2022-4413](https://cve.now/CVE-2022-4413.md): Cross-site Scripting (XSS) - Reflected in nuxt/framework (CVSS 6.1, nuxt/framework)
- [CVE-2022-4414](https://cve.now/CVE-2022-4414.md): Cross-site Scripting (XSS) - DOM in nuxt/framework (CVSS 6.1, nuxt/framework)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-12-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.