TI-2022-03644 Aliases CVE-2022-3975 GHSA-x45f-j34v-75xm

NukeViet CMS Data URL Request.php filterAttr cross site scripting

LOW 28CWE-707Published 2022-11-13 · Updated 2025-04-15

Key facts

Attack vector: Network
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: Cross-site scripting
Confidentiality · integrity · availability: Low · Low · None
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub. Impact type from CWE-79.

Summary

A vulnerability, which was classified as problematic, has been found in NukeViet CMS. Affected by this issue is the function filterAttr of the file vendor/vinades/nukeviet/Core/Request.php of the component Data URL Handler. The manipulation of the argument attrSubSet leads to cross site scripting. The attack may be launched remotely. Upgrading to version 4.5 is able to address this issue. The name of the patch is 0b3197fad950bb3383e83039a8ee4c9509b3ce02. It is recommended to upgrade the affected component. VDB-213554 is the identifier assigned to this vulnerability.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00564 47th percentileScored 2026-11-07

Fix Fixed nukeviet/nukeviet (Packagist): 4.5

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
NukeViet	CMS	all versions	—	No fix listed	CNA
—	nukeviet/nukeviet (Packagist)	before 4.5	4.5	Patch available	GHSA-x45f-j34v-75xm

CMS VendorNukeViet Affected all versions Fixed in — No fix listed CNA
nukeviet/nukeviet (Packagist) Vendor— Affected before 4.5 Fixed in 4.5 Patch available GHSA-x45f-j34v-75xm

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:nukeviet:nukeviet::::::::	before 4.5	Vulnerable	NukeViet

cpe:2.3:a:nukeviet:nukeviet:*:*:*:*:*:*:*:* Versions before 4.5 Vulnerable ·NukeViet

Remediation

Fix · GHSA-x45f-j34v-75xm nukeviet/nukeviet (Packagist) Fixed in 4.5 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2022-3975
2026-10-03 Alias added: GHSA-x45f-j34v-75xm

References

Patch 1

https://github.com/nukeviet/nukeviet/commit/0b3197fad950bb3383e83039a8ee4c9509b3ce02

Advisory 2

TI-2024-24299 nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before have a Deserialization… CVSS 3.1HIGH 8.8
TI-2024-24300 nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before are vulnerable to… CVSS 3.1MEDIUM 5.7
TI-2025-08024 Vinades NukeViet Module index.php server-side request forgery CVSS 4.0MEDIUM 5.3
TI-2019-05440 includes/core/is_user.php in NukeViet before 4.3.04 deserializes the untrusted… CVSS 3.1CRITICAL 9.8
TI-2019-05441 modules/banners/funcs/click.php in NukeViet before 4.3.04 has a SQL INSERT statement with… CVSS 3.1CRITICAL 9.8
TI-2020-14169 SQL Injection vulnerability in NukeViet CMS module Shops 4.0.29 and 4.3 via the (1)… CVSS 3.1CRITICAL 9.8

See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences