{"id":"CVE-2022-4928","summary":"icplayer presenter.js AddonText_Selection_create cross site scripting","details":"A vulnerability was found in icplayer up to 0.819. It has been declared as problematic. Affected by this vulnerability is the function AddonText_Selection_create of the file addons/Text_Selection/src/presenter.js. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 0.820 is able to address this issue. The identifier of the patch is 2223628e6db1df73f6d633d2c0422d995990f0a3. It is recommended to upgrade the affected component. The identifier VDB-222289 was assigned to this vulnerability.","modified":"2026-08-12T13:33:38.762106Z","published":"2023-03-06T01:00:05.340Z","database_specific":{"cna_assigner":"VulDB","cwe_ids":["CWE-79"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4928.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4928.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4928"},{"type":"ADVISORY","url":"https://vuldb.com/?id.222289"},{"type":"REPORT","url":"https://github.com/icplayer/icplayer/pull/881"},{"type":"REPORT","url":"https://vuldb.com/?ctiid.222289"},{"type":"FIX","url":"https://github.com/icplayer/icplayer/commit/2223628e6db1df73f6d633d2c0422d995990f0a3"},{"type":"FIX","url":"https://github.com/icplayer/icplayer/releases/tag/v0.820"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/icplayer/icplayer","events":[{"introduced":"0"},{"fixed":"204b6da4b67adedda519d898829e269bbb365293"},{"fixed":"2223628e6db1df73f6d633d2c0422d995990f0a3"}],"database_specific":{"cpe":"cpe:2.3:a:learnetic:icplayer:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"0.820"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["0.819","v0.819","v0.818","v0.817","v0.816","v0.815","v0.814","v0.813","v0.812","v0.810","v0.811","v0.805","v0.809","v0.802","v0.808","v0.807","v0.806","v0.803","v0.804","v0.796","v0.801","v0.800","v0.798","v0.799","v0.797","v0.795","v0.794","v0.793","v0.791","v0.792","v0.785","v0.787","v0.790","v0.789","v0.788","v0.786","v0.784","v0.782","v0.781","v0.783","v0.780","v0.779","v0.777","v0.778","v0.776","v0.775","v0.772","v0.774","v0.771","v0.773","v0.770","v0.769","v0.766","v0.767","v0.768","v0.765","v0.763","v0.764","v0.762","v0.761","v0.760","v0.759","v0.758","v0.757","v0.756","v0.755","v0.754","v0.753","v0.752","v0.751","v0.750","v0.749","v0.748","v0.747","v0.746","v0.745","v0.739","v0.740","v0.744","v0.743","v0.742","v0.741","v0.734","v0.738","v0.737","v0.736","v0.735","v0.732","v0.733","v0.731","v0.730","v0.729","v0.728","v0.727","v0.726","v0.725","v0.724","v0.722","v0.719","v0.721","v0.720","v0.718","v0.717","v0.716","v0.715","v0.714","v0.713","v0.712","v0.711","v0.710","v0.709","v0.708","v0.706","v0.707","v0.705","v0.703","v0.704","v0.702","v0.701","v0.700","v0.699","v0.697","v0.698","v0.694","v0.696","v0.695","v0.693","v0.692","v0.691","v0.690","v0.688","v0.689","v0.687","v0.686","v0.685","v0.684","v0.683","v0.682","v0.681","v0.680","v0.679","v0.678","v0.677","v0.676","v0.675","v0.674","v0.673","v0.672","v0.671","v0.670","v0.669","v0.668","v0.667","v0.666","v0.665","v0.664","v0.663","v0.662","v0.661","v0.660","v0.659","v0.658","v0.657","v0.656","v0.655","v0.654","v0.653","v0.652","v0.651","v0.650","v0.649","v0.648","v0.647","v0.646","v0.645","v0.644","v0.643","v0.642","v0.641","v0.640","v0.639","v0.638","v0.637","v0.636","v0.635","v0.634","v0.633","v0.632","v0.631","v0.628","v0.630","v0.629","v0.627","v0.626","v0.625","v0.624","v0.623","v0.622","v0.621","v0.620","v0.619","v0.618","v0.617","v0.616","v0.615","v0.614","v0.613","v0.612","v0.610","v0.611","v0.609","v0.608","v0.607","v0.606","v0.605","v0.604","v0.603","v0.602","v0.601","v0.600","v0.599","v0.598","v0.597","v0.596","v0.595","v0.594","v0.593","v0.592","v0.591","v0.590","v0.589","v0.588","v0.586","v0.587","v0.585","v0.584","v0.582","v0.583","v0.581","v0.580","v0.579","v0.578","v0.577","v0.576","v0.575","v0.574","v0.573","v0.572","v0.571","v0.570","v0.569","v0.568","v0.567","v0.566","v0.565","v0.564","v0.563","v0.562","v0.561","v0.560","v0.559","v0.558","v0.557","v0.556","v0.555","v0.552","v0.554","v0.553","v0.551","v0.550","v0.549","v0.548","v0.547","v0.546","v0.540","v0.545","v0.544","v0.543","v0.542","v0.541","v0.538","v0.539","v0.537","v0.536","v0.535","v0.534","v0.533","v0.532","v0.531","v0.530","v0.529","v0.528","v0.527","v0.526","v0.525","v0.524","v0.523","v0.522","v0.521","v0.520","v0.519","v0.518","v0.517","v0.516","v0.515","v0.514","v0.513","v0.512","v0.511","v0.510","v0.509","v0.508","v0.507","v0.506","v0.505","v0.504","v0.503","v0.502","v0.501","v0.500","v0.499","v0.498","v0.497","v0.496","v0.492","v0.491","v0.495","v0.494","v0.493","v0.490","v0.489","v0.487","v0.488","v0.486","v0.485","v0.484","v0.483","v0.482","v0.481","v0.480","v0.479","v0.478","v0.477","v0.476","v0.475","v0.474","v0.473","v0.472","v0.471","v0.470","v0.469","v0.468","v0.467","v0.466","v0.465","v0.464","v0.463","v0.462","v0.461","v0.460","v0.459","v0.458","v0.457","v0.456","v0.455","v0.454","v0.453","v0.452","v0.451","v0.450","v0.449","v0.448","v0.447","v0.446","v0.445","v0.444","v0.443","v0.442","v0.435","v0.441","v0.440","v0.439","v0.438","v0.437","v0.436","v0.434","v0.433","v0.432","v0.431","v0.430","v0.429","v0.428","v0.427","v0.426","v0.424","v0.423","v0.425","v0.422","v0.421","v0.420","v0.419","v0.418","v0.417","v0.416","v0.415","v0.414","v0.413","v0.412","v0.411","v0.410","v0.409","v0.408","v0.407","v0.406","v0.405","v0.404","v0.403","v0.402","v0.401","v0.400","v0.399","v0.398","v0.397","v0.396","v0.395","v0.394","v0.393","v0.392","v0.391","v0.390","v0.389","v0.388","v0.387","v0.386","v0.385","v0.384","v0.383","v0.382","v0.381","v0.380","v0.379","v0.378","v0.377","v0.376","v0.374","v0.373","v0.372","v0.371","v0.370","v0.369","v0.368","v0.367","v0.366","v0.365","v0.364","v0.363","v0.362","v0.361","v0.360","v0.359","v0.358","v0.357","v0.356","v0.354","v0.355","v0.353","v0.352","v0.351","v0.350","v0.349","v0.348","v0.347","v0.346","v0.345","v0.344","v0.343","v0.342","v0.341","v0.340","v0.339","v0.338","v0.337","v0.336","v0.335","v0.334","v0.333","v0.332","v0.330","v0.329","v0.327","v0.328","v0.326","v0.325","v0.324","v0.323","v0.322","v0.321","v0.320","v0.319","v0.318","v0.317","v0.316","v0.315","v0.314","v0.313","v0.312","v0.311","v0.310","v0.309","v0.308","v0.307","v0.306","v0.305","v0.304","v0.303","v0.302","v0.301","v0.300","v0.299","v0.298","v0.297","v0.292","v0.291","v0.290","v0.289","v0.288","v0.287","v0.286","v0.285","v0.284","v0.283","v0.282","v0.281","v0.279","v0.278","v0.277","v0.276","v0.275","v0.274","v0.273","v0.272","v0.271","v0.270","v0.269","v0.268","v0.267","v0.266","v0.265","v0.264","v0.263","v0.262","v0.261","v0.260","v0.259","v0.258","v0.257","v0.256","v0.255","v0.254","v0.253","v0.252","v0.251","v0.250","v0.249","v0.248","v0.247","v0.246","v0.245","v0.244","v0.243","v0.242","v0.241","v0.240","v0.239","v0.238","v0.237","v0.236","v0.235","v0.234","v0.233","v0.232","v0.231","v0.230","v0.229","v0.228","v0.227","v0.226","v0.225","v0.224","v0.223","v0.222","v0.221","v0.220","v0.219","v0.218","v0.217","v0.216","v0.215","v0.214","v0.213","v0.212","v0.211","v0.210","v0.209","v0.208","v0.207","v0.206","v0.205","v0.204","v0.203","v0.202","v0.201","v0.200","v0.199","v0.198","v0.197","v0.196","v0.195","v0.194","v0.193","v0.192","v0.191","v0.190","v0.189","v0.188","v0.187","v0.186","v0.185","v0.184","v0.183","v0.182","v0.181","v0.180","v0.179","v0.178","v0.177","v0.176","v0.175","v0.174","v0.173","v0.172","v0.171","v0.170","v0.169","v0.168","v0.167","v0.166","v0.165","v0.164","v0.163","v0.161","v0.160","v0.159","v0.158","v0.157","v0.156","v0.154","v0.153","v0.152","v0.150","v0.149","v0.148","v0.147","v0.146","v0.145","v0.144","v0.143","v0.142","v0.141","v0.140","v0.139","v0.138","v0.137","v0.136","v0.135","v0.134","v0.133","v0.132","v0.131","v0.130","v0.129","v0.128","v0.127","v0.126","v0.125","v0.124","v0.123","v0.122","v0.120","v0.119","v0.118","v0.117","v0.116","v0.115","v0.114","v0.113","v0.112","v0.111","v110","v0.110","v0.108","v0.107","v0.106","v0.105","v0.104","v0.102","v0.101","v0.99","v0.100","v0.98"],"database_specific":{"vanir_signatures_modified":"2026-08-12T13:33:38Z","vanir_signatures":[{"signature_version":"v1","source":"https://github.com/icplayer/icplayer/commit/204b6da4b67adedda519d898829e269bbb365293","target":{"file":"src/main/java/com/lorepo/icplayer/client/page/PageController.java","function":"initModules"},"deprecated":false,"digest":{"function_hash":"276575270930432484120660373323828720329","length":984},"id":"CVE-2022-4928-63d08867","signature_type":"Function"},{"digest":{"line_hashes":["14139224825123689923542920402890272570","80472978092504309565343514426218387105","171190889453841971430112838466204101168","122051419295698920746545417334325230629","202836146016075419647317719628490244654","239841640035743427071486364472473336043","278682266601495686432743411527960661808","62472639091246011663844274718534631054","208749567853148630791191176407228590566","79636820173120551901910166170465824976","100685064932096150130478066723977291138","293351422900443838619656077881203025095","244243338708017041427683045246963278684","39894492805534008233706232484672297785","140802471716773010008551440035286988998","17646719927068839861388506925157432887","172683235148157029523279936645367637275"],"threshold":0.9},"id":"CVE-2022-4928-85647039","signature_type":"Line","signature_version":"v1","source":"https://github.com/icplayer/icplayer/commit/204b6da4b67adedda519d898829e269bbb365293","target":{"file":"src/main/java/com/lorepo/icplayer/client/page/PageController.java"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["45105601395519408635377570588503709254","199072964956798004697230498191667948490","79326099107768339122051653917873876955","249367062266338710763131118513707118566","208803291775119622011805080519557256998","74861144608427698594904481793287574852"],"threshold":0.9},"id":"CVE-2022-4928-cd2bab13","signature_type":"Line","signature_version":"v1","source":"https://github.com/icplayer/icplayer/commit/204b6da4b67adedda519d898829e269bbb365293","target":{"file":"src/main/java/com/lorepo/icplayer/client/model/page/group/GroupPresenter.java"}},{"id":"CVE-2022-4928-e2944f44","signature_type":"Function","signature_version":"v1","source":"https://github.com/icplayer/icplayer/commit/204b6da4b67adedda519d898829e269bbb365293","target":{"file":"src/main/java/com/lorepo/icplayer/client/model/page/group/GroupPresenter.java","function":"hasView"},"deprecated":false,"digest":{"function_hash":"187853252868760254195964915936182545091","length":51}}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-4928.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N"}]}