Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2022-24948: Apache JSPWiki preauth Stored XSS to ATO

pwn.ai | vulnerability | CVE-2022-24948 | #vulnerability-research | #account-takeover | #stored-xss | #jspwiki | #cve-2022-24948

Summary

CVE-2022-24948: how a tricky stored XSS in JSPWiki's username field was exploited via a meta-tag focus trick that avoids colons, escalating pre-auth injection toward account takeover.
CVE
CVE-2022-24948
Published
Collected

original ↗

Related coverage

vulnerability · idnsec.com
[CVE-2026-93485] Comment2XSS: Zero-Click Pre-Auth XSS to Potential RCE in WordPress Core
An unauthenticated stored XSS (CVE-2026-93485) in WordPress core's wpautop() turns crafted comments into zero-click XSS, escalating to RCE via the admin session. Fixed in 7.1.1, backported to 4.7.36.
Critical · vulnerability · bishopfox.com
A Millisecond of Predictability: Why CVE-2026-11374 Is Hard to Exploit
The flaw can yield unauthenticated administrator takeover across four AD360-integrated ManageEngine products. Exploitation is targeted and timing-dependent, but the impact is critical.
Critical · vulnerability · bishopfox.com
Looting UniFi Controllers: Detecting and Weaponizing CVE-2026-22557
CVE-2026-22557, a CVSS 10.0 path traversal in UniFi Network's guest portal, lets unauthenticated attackers read arbitrary files and controller backups holding admin credentials, enabling takeover.
High · vulnerability · bishopfox.com
CVE-2026-27886: Unauthenticated Boolean-Oracle Exfiltration of Administrator Secrets in Strapi
CVE-2026-27886 is a Strapi 4.0.0–5.36.1 sanitization bypass that turns API responses into a one-bit oracle; attackers extract an admin's reset token character by character, then take over the account.
vulnerability · bishopfox.com
Dolibarr Version 9.0.1 — Multiple Vulnerabilities
Bishop Fox advisory on three Dolibarr 9.0.1 flaws: RCE via the backup mysqldump parameter (CVE-2019-11200), RCE in the website module, and stored XSS; fixed in 9.0.3.
vulnerability · bishopfox.com
Cantemo Portal Version 3.8.4 - Cross-Site Scripting
Cantemo Portal 3.8.4 stored XSS (CVE-2019-7551) lets a low-privilege user run JavaScript against admins, potentially reaching server-side code execution; fixed in 4.0.0.
back