CVE-2022-4928

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-4928

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-4928.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-4928

Published

2023-03-06T01:00:05Z

Modified

2026-10-28T10:31:18Z

Severity

3.5 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N CVSS Calculator

Summary

icplayer presenter.js AddonText_Selection_create cross site scripting

Details

A vulnerability was found in icplayer up to 0.819. It has been declared as problematic. Affected by this vulnerability is the function AddonText_Selection_create of the file addons/Text_Selection/src/presenter.js. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 0.820 is able to address this issue. The identifier of the patch is 2223628e6db1df73f6d633d2c0422d995990f0a3. It is recommended to upgrade the affected component. The identifier VDB-222289 was assigned to this vulnerability.

Database specific

{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-79"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4928.json"
}

References

Affected packages

Git / github.com/icplayer/icplayer

Affected ranges

Type

GIT

Repo

https://github.com/icplayer/icplayer

Events

Introduced

a3110b440f16beae1ba591b2b9ba07f8a8f261ef

Fixed

2223628e6db1df73f6d633d2c0422d995990f0a3

Fixed

204b6da4b67adedda519d898829e269bbb365293

Database specific

Show details

{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0.819"
                },
                {
                    "last_affected":  "0.819"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "fixed":  "2223628e6db1df73f6d633d2c0422d995990f0a3"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        },
        {
            "original_tag":  "v0.820",
            "range":  [
                {
                    "fixed":  "204b6da4b67adedda519d898829e269bbb365293"
                }
            ],
            "source":  "REFERENCES_TAG"
        }
    ]
}

Affected versions

0.*

0.819

v0.*

v0.819

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-4928.json"

vanir_signatures

[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "276575270930432484120660373323828720329",
            "length":  984
        },
        "id":  "CVE-2022-4928-63d08867",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/icplayer/icplayer/commit/204b6da4b67adedda519d898829e269bbb365293",
        "target":  {
            "file":  "src/main/java/com/lorepo/icplayer/client/page/PageController.java",
            "function":  "initModules"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "14139224825123689923542920402890272570",
                "80472978092504309565343514426218387105",
                "171190889453841971430112838466204101168",
                "122051419295698920746545417334325230629",
                "202836146016075419647317719628490244654",
                "239841640035743427071486364472473336043",
                "278682266601495686432743411527960661808",
                "62472639091246011663844274718534631054",
                "208749567853148630791191176407228590566",
                "79636820173120551901910166170465824976",
                "100685064932096150130478066723977291138",
                "293351422900443838619656077881203025095",
                "244243338708017041427683045246963278684",
                "39894492805534008233706232484672297785",
                "140802471716773010008551440035286988998",
                "17646719927068839861388506925157432887",
                "172683235148157029523279936645367637275"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2022-4928-85647039",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/icplayer/icplayer/commit/204b6da4b67adedda519d898829e269bbb365293",
        "target":  {
            "file":  "src/main/java/com/lorepo/icplayer/client/page/PageController.java"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "45105601395519408635377570588503709254",
                "199072964956798004697230498191667948490",
                "79326099107768339122051653917873876955",
                "249367062266338710763131118513707118566",
                "208803291775119622011805080519557256998",
                "74861144608427698594904481793287574852"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2022-4928-cd2bab13",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/icplayer/icplayer/commit/204b6da4b67adedda519d898829e269bbb365293",
        "target":  {
            "file":  "src/main/java/com/lorepo/icplayer/client/model/page/group/GroupPresenter.java"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "187853252868760254195964915936182545091",
            "length":  51
        },
        "id":  "CVE-2022-4928-e2944f44",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/icplayer/icplayer/commit/204b6da4b67adedda519d898829e269bbb365293",
        "target":  {
            "file":  "src/main/java/com/lorepo/icplayer/client/model/page/group/GroupPresenter.java",
            "function":  "hasView"
        }
    }
]

vanir_signatures_modified

"2026-10-28T10:31:18Z"