CVE-2022-1086

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-1086

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-1086.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-1086

Published

2022-03-29T05:50:53Z

Modified

2026-08-12T03:51:11Z

Severity

3.5 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N CVSS Calculator

Summary

DolphinPHP User Management Page cross site scripting

Details

A vulnerability was found in DolphinPHP up to 1.5.0 and classified as problematic. Affected by this issue is the User Management Page. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Database specific

{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-79"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1086.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "1.0"
                },
                {
                    "last_affected": "1.0"
                },
                {
                    "introduced": "1.1"
                },
                {
                    "last_affected": "1.1"
                },
                {
                    "introduced": "1.2"
                },
                {
                    "last_affected": "1.2"
                },
                {
                    "introduced": "1.3"
                },
                {
                    "last_affected": "1.3"
                },
                {
                    "introduced": "1.4"
                },
                {
                    "last_affected": "1.4"
                },
                {
                    "introduced": "1.5"
                },
                {
                    "last_affected": "1.5"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/caiweiming/dolphinphp

Affected ranges

Type

GIT

Repo

https://github.com/caiweiming/dolphinphp

Events

Introduced

Last Affected

f62ef4ff82daaa54fbcf9a86b649094f44c4917f

Database specific

Show details

{
    "cpe": "cpe:2.3:a:dolphinphp_project:dolphinphp:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.5.0"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

1.*

1.0.0beta

1.0.8

V1.*

V1.3.0

V1.3.1

v1.*

v1.1.0

v1.3.0

v1.3.3

v1.4.0

v1.4.1

v1.4.2

v1.5.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-1086.json"