CVE-2022-4353: low-severity vulnerability in LinZhaoguan pb-cms
LinZhaoguan pb-cms IpUtil.getIpAddr cross site scripting
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 3.5epss 0.4%
A vulnerability has been found in LinZhaoguan pb-cms 2.0 and classified as problematic. Affected by this vulnerability is the function IpUtil.getIpAddr. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-215113 was assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Affected products
LinZhaoguan · pb-cmsRelated CVEs — LinZhaoguan pb-cms
In the same product, most dangerous first.
CVE-2022-4354MEDIUMLinZhaoguan pb-cms Message Board comment cross site scriptingEPSS 0.6%CVE-2024-0776LOWLinZhaoguan pb-cms Comment cross site scriptingEPSS 0.6%CVE-2025-2043MEDIUMLinZhaoguan pb-cms Add New Topic admin#themes deserializationEPSS 0.5%CVE-2025-3386MEDIUMLinZhaoguan pb-cms Friendship Link admin#links cross site scriptingEPSS 0.4%CVE-2025-3385MEDIUMLinZhaoguan pb-cms Classification Management Page cross site scriptingEPSS 0.4%CVE-2024-10479MEDIUMLinZhaoguan pb-cms Theme Management Module admin#themes cross site scriptingEPSS 0.3%