stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2022-0540 (severity: CRITICAL, weakness: CWE-287)
A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before 8.22.0. This also affects Atlassian Jira Service Management Server and Data Center versions before 4.13.18, versions 4.14.0 and later before 4.20.6, and versions 4.21.0 and later before 4.22.0.
CVE-2022-0541 (severity: CRITICAL, weakness: CWE-284)
The flo-launch WordPress plugin before 2.4.1 injects code into wp-config.php when creating a cloned site, allowing any attacker to initiate a new site install by setting the flo_custom_table_prefix cookie to an arbitrary value.
CVE-2022-0542 (severity: HIGH, weakness: CWE-79)
Cross-site Scripting (XSS) - DOM in GitHub repository chatwoot/chatwoot prior to 2.7.0.
CVE-2022-0543 (severity: CRITICAL, weakness: CWE-862)
It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.
CVE-2022-0544 (severity: MEDIUM, weakness: CWE-191)
An integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly allowing an attacker to read sensitive data using a crafted DDS image file. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1.
CVE-2022-0545 (severity: HIGH, weakness: CWE-190)
An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is loaded. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1.
CVE-2022-0546 (severity: HIGH, weakness: CWE-190)
A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution.
CVE-2022-0547 (severity: CRITICAL, weakness: CWE-305)
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.
CVE-2022-0549 (severity: MEDIUM, weakness: NVD-CWE-Other)
An issue has been discovered in GitLab CE/EE affecting all versions before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Under certain conditions, GitLab REST API may allow unprivileged users to add other users to groups even if that is not possible to do through the Web UI.
CVE-2022-0550 (severity: HIGH, weakness: CWE-20)
Improper Input Validation vulnerability in custom report logo upload in Nozomi Networks Guardian, and CMC allows an authenticated attacker with admin or report manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks Guardian versions prior to 22.0.0. Nozomi Networks CMC versions prior to 22.0.0.
CVE-2022-0551 (severity: HIGH, weakness: CWE-20)
Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticated attacker with admin or import manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks Guardian versions prior to 22.0.0. Nozomi Networks CMC versions prior to 22.0.0.
CVE-2022-0552 (severity: MEDIUM, weakness: CWE-444)
A flaw was found in the original fix for the netty-codec-http CVE-2021-21409, where the OpenShift Logging openshift-logging/elasticsearch6-rhel8 container was incomplete. The vulnerable netty-codec-http maven package was not removed from the image content. This flaw affects origin-aggregated-logging versions 3.11.
CVE-2022-0553 (severity: MEDIUM, weakness: CWE-200)
There is no check to see if slot 0 is being uploaded from the device to the host. When using encrypted images this means the unencrypted firmware can be retrieved easily.
CVE-2022-0554 (severity: HIGH, weakness: CWE-823)
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.
CVE-2022-0555 (severity: HIGH, weakness: CWE-256)
Subiquity Shows Guided Storage Passphrase in Plaintext with Read-all Permissions
CVE-2022-0556 (severity: HIGH, weakness: CWE-269)
A local privilege escalation vulnerability caused by incorrect permission assignment in some directories of the Zyxel AP Configurator (ZAC) version 1.1.4, which could allow an attacker to execute arbitrary code as a local administrator.
CVE-2022-0557 (severity: HIGH, weakness: CWE-78)
OS Command Injection in Packagist microweber/microweber prior to 1.2.11.
CVE-2022-0558 (severity: CRITICAL, weakness: CWE-79)
Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.
CVE-2022-0559 (severity: HIGH, weakness: CWE-416)
Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.
CVE-2022-0560 (severity: MEDIUM, weakness: CWE-601)
Open Redirect in Packagist microweber/microweber prior to 1.2.11.
CVE-2022-0561 (severity: MEDIUM, weakness: CWE-476)
Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, the fix is available with commit eecb0712.
CVE-2022-0562 (severity: MEDIUM, weakness: CWE-476)
Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, a fix is available with commit 561599c.
CVE-2022-0563 (severity: MEDIUM, weakness: CWE-209)
A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.
CVE-2022-0564 (severity: MEDIUM, weakness: CWE-204)
A vulnerability in Qlik Sense Enterprise on Windows could allow an remote attacker to enumerate domain user accounts. An attacker could exploit this vulnerability by sending authentication requests to an affected system. A successful exploit could allow the attacker to compare the response time that are returned by the affected system to determine which accounts are valid user accounts. Affected systems are only vulnerable if they have LDAP configured. The affected URI is /internal_forms_authentication/ the response time of the form is longer if the supplied user does not exists and shorter if the user exists.
CVE-2022-0565 (severity: MEDIUM, weakness: CWE-79)
Cross-site Scripting in Packagist pimcore/pimcore prior to 10.3.1.
CVE-2022-0566 (severity: HIGH, weakness: CWE-787)
It may be possible for an attacker to craft an email message that causes Thunderbird to perform an out-of-bounds write of one byte when processing the message. This vulnerability affects Thunderbird < 91.6.1.
CVE-2022-0567 (severity: CRITICAL, weakness: CWE-20)
A flaw was found in ovn-kubernetes. This flaw allows a system administrator or privileged attacker to create an egress network policy that bypasses existing ingress policies of other pods in a cluster, allowing network traffic to access pods that should not be reachable. This issue results in information disclosure and other attacks on other pods that should not be reachable.
CVE-2022-0569 (severity: MEDIUM, weakness: CWE-203)
Observable Discrepancy in Packagist snipe/snipe-it prior to v5.3.9.
CVE-2022-0570 (severity: HIGH, weakness: CWE-122)
Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.
CVE-2022-0571 (severity: MEDIUM, weakness: CWE-79)
Cross-site Scripting (XSS) - Reflected in GitHub repository phoronix-test-suite/phoronix-test-suite prior to 10.8.2.
CVE-2022-0572 (severity: HIGH, weakness: CWE-122)
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-0573 (severity: HIGH, weakness: CWE-502)
JFrog Artifactory before 7.36.1 and 6.23.41, is vulnerable to Insecure Deserialization of untrusted data which can lead to DoS, Privilege Escalation and Remote Code Execution when a specially crafted request is sent by a low privileged authenticated user due to insufficient validation of a user-provided serialized object.
CVE-2022-0574 (severity: MEDIUM, weakness: CWE-284)
Improper Access Control in GitHub repository publify/publify prior to 9.2.8.
CVE-2022-0575 (severity: MEDIUM, weakness: CWE-79)
Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.2.0.
CVE-2022-0576 (severity: MEDIUM, weakness: CWE-79)
Cross-site Scripting (XSS) - Generic in Packagist librenms/librenms prior to 22.1.0.
CVE-2022-0577 (severity: HIGH, weakness: CWE-200)
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1.
CVE-2022-0578 (severity: MEDIUM, weakness: CWE-94)
Code Injection in GitHub repository publify/publify prior to 9.2.8.
CVE-2022-0579 (severity: MEDIUM, weakness: CWE-862)
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9.
CVE-2022-0580 (severity: HIGH, weakness: CWE-863)
Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0.
CVE-2022-0581 (severity: HIGH, weakness: CWE-416)
Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
CVE-2022-0582 (severity: CRITICAL, weakness: CWE-476)
Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
CVE-2022-0583 (severity: HIGH, weakness: CWE-787)
Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
CVE-2022-0585 (severity: MEDIUM, weakness: CWE-834)
Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via packet injection or crafted capture file
CVE-2022-0586 (severity: HIGH, weakness: CWE-835)
Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
CVE-2022-0587 (severity: HIGH, weakness: CWE-285)
Improper Authorization in Packagist librenms/librenms prior to 22.2.0.
CVE-2022-0588 (severity: MEDIUM, weakness: CWE-862)
Missing Authorization in Packagist librenms/librenms prior to 22.2.0.
CVE-2022-0589 (severity: MEDIUM, weakness: CWE-79)
Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.1.0.
CVE-2022-0590 (severity: MEDIUM, weakness: CWE-79)
The BulletProof Security WordPress plugin before 5.8 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVE-2022-0591 (severity: CRITICAL, weakness: CWE-918)
The FormCraft WordPress plugin before 3.8.28 does not validate the URL parameter in the formcraft3_get AJAX action, leading to SSRF issues exploitable by unauthenticated users
CVE-2022-0592 (severity: CRITICAL, weakness: CWE-89)
The MapSVG WordPress plugin before 6.2.20 does not validate and escape a parameter via a REST endpoint before using it in a SQL statement, leading to a SQL Injection exploitable by unauthenticated users.
CVE-2022-0593 (severity: MEDIUM, weakness: CWE-73)
The Login with phone number WordPress plugin before 1.3.7 includes a file delete.php with no form of authentication or authorization checks placed in the plugin directory, allowing unauthenticated user to remotely delete the plugin files leading to a potential Denial of Service situation.
CVE-2022-0594 (severity: MEDIUM, weakness: CWE-863)
The Professional Social Sharing Buttons, Icons & Related Posts WordPress plugin before 9.7.6 does not have proper authorisation check in one of the AJAX action, available to unauthenticated (in v < 9.7.5) and author+ (in v9.7.5) users, allowing them to call it and retrieve various information such as the list of active plugins, various version like PHP, cURL, WP etc.
CVE-2022-0595 (severity: MEDIUM, weakness: CWE-79)
The Drag and Drop Multiple File Upload WordPress plugin before 1.3.6.3 allows SVG files to be uploaded by default via the dnd_codedropz_upload AJAX action, which could lead to Stored Cross-Site Scripting issue
CVE-2022-0596 (severity: MEDIUM, weakness: CWE-1284)
Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11.
CVE-2022-0597 (severity: MEDIUM, weakness: CWE-601)
Open Redirect in Packagist microweber/microweber prior to 1.2.11.
CVE-2022-0598 (severity: MEDIUM, weakness: CWE-79)
The Login with phone number WordPress plugin before 1.3.8 does not sanitise and escape plugin settings which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVE-2022-0599 (severity: MEDIUM, weakness: CWE-79)
The Mapping Multiple URLs Redirect Same Page WordPress plugin through 5.8 does not sanitize and escape the mmursp_id parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
CVE-2022-0600 (severity: MEDIUM, weakness: CWE-79)
The Conference Scheduler WordPress plugin before 2.4.3 does not sanitize and escape the tab parameter before outputting back in an admin page, leading to a Reflected Cross-Site Scripting.
CVE-2022-0601 (severity: MEDIUM, weakness: CWE-79)
The Countdown, Coming Soon, Maintenance WordPress plugin before 2.2.9 does not sanitize and escape the post parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
CVE-2022-0602 (severity: HIGH, weakness: CWE-79)
Cross-site Scripting (XSS) - DOM in GitHub repository tastyigniter/tastyigniter prior to 3.3.0.
CVE-2022-0603 (severity: HIGH, weakness: CWE-416)
Use after free in File Manager in Google Chrome on Chrome OS prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-0604 (severity: HIGH, weakness: CWE-787)
Heap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-0605 (severity: HIGH, weakness: CWE-416)
Use after free in Webstore API in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and convinced a user to enage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-0606 (severity: HIGH, weakness: CWE-416)
Use after free in ANGLE in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-0607 (severity: HIGH, weakness: CWE-416)
Use after free in GPU in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-0608 (severity: HIGH, weakness: CWE-190)
Integer overflow in Mojo in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-0609 (severity: HIGH, weakness: CWE-416)
Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-0610 (severity: HIGH, weakness: CWE-787)
Inappropriate implementation in Gamepad API in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-0611 (severity: HIGH, weakness: CWE-862)
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.11.
CVE-2022-0612 (severity: MEDIUM, weakness: CWE-79)
Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
CVE-2022-0613 (severity: MEDIUM, weakness: CWE-639)
Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8.
CVE-2022-0614 (severity: HIGH, weakness: CWE-823)
Use of Out-of-range Pointer Offset in Homebrew mruby prior to 3.2.
CVE-2022-0615 (severity: HIGH, weakness: CWE-416)
Use-after-free in eset_rtp kernel module used in ESET products for Linux allows potential attacker to trigger denial-of-service condition on the system.
CVE-2022-0616 (severity: MEDIUM, weakness: CWE-352)
The Amelia WordPress plugin before 1.0.47 does not have CSRF check in place when deleting customers, which could allow attackers to make a logged in admin delete arbitrary customers via a CSRF attack
CVE-2022-0617 (severity: MEDIUM, weakness: CWE-476)
A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udf_file_write_iter function for the malicious UDF image. A local user could use this flaw to crash the system. Actual from Linux kernel 4.2-rc1 till 5.17-rc2.
CVE-2022-0618 (severity: HIGH, weakness: CWE-130)
A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This vulnerability is caused by a logical error when parsing a HTTP/2 HEADERS or HTTP/2 PUSH_PROMISE frame where the frame contains padding information without any other data. This logical error caused confusion about the size of the frame, leading to a parsing error. This parsing error immediately crashes the entire process. Sending a HEADERS frame or PUSH_PROMISE frame with HTTP/2 padding information does not require any special permission, so any HTTP/2 connection peer may send such a frame. For clients, this means any server to which they connect may launch this attack. For servers, anyone they allow to connect to them may launch such an attack. The attack is low-effort: it takes very little resources to send an appropriately crafted frame. The impact on availability is high: receiving the frame immediately crashes the server, dropping all in-flight connections and causing the service to need to restart. It is straightforward for an attacker to repeatedly send appropriately crafted frames, so attackers require very few resources to achieve a substantial denial of service. The attack does not have any confidentiality or integrity risks in and of itself: swift-nio-http2 is parsing the frame in memory-safe code, so the crash is safe. However, sudden process crashes can lead to violations of invariants in services, so it is possible that this attack can be used to trigger an error condition that has confidentiality or integrity risks. The risk can be mitigated if untrusted peers can be prevented from communicating with the service. This mitigation is not available to many services. The issue is fixed by rewriting the parsing code to correctly handle the condition. The issue was found by automated fuzzing by oss-fuzz.
CVE-2022-0619 (severity: MEDIUM, weakness: CWE-79)
The Database Peek WordPress plugin through 1.2 does not sanitize and escape the match parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
CVE-2022-0620 (severity: MEDIUM, weakness: CWE-79)
The Delete Old Orders WordPress plugin through 0.2 does not sanitize and escape the date parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
CVE-2022-0621 (severity: MEDIUM, weakness: CWE-79)
The dTabs WordPress plugin through 1.4 does not sanitize and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
CVE-2022-0622 (severity: MEDIUM, weakness: CWE-209)
Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11.
CVE-2022-0623 (severity: MEDIUM, weakness: CWE-125)
Out-of-bounds Read in Homebrew mruby prior to 3.2.
CVE-2022-0624 (severity: MEDIUM, weakness: CWE-639)
Authorization Bypass Through User-Controlled Key in GitHub repository ionicabizau/parse-path prior to 5.0.0.
CVE-2022-0625 (severity: MEDIUM, weakness: CWE-79)
The Admin Menu Editor WordPress plugin through 1.0.4 does not sanitize and escape a parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
CVE-2022-0626 (severity: MEDIUM, weakness: CWE-79)
The Advanced Admin Search WordPress plugin before 1.1.6 does not sanitize and escape some parameters before outputting them back in an admin page, leading to a Reflected Cross-Site Scripting.
CVE-2022-0627 (severity: MEDIUM, weakness: CWE-79)
The Amelia WordPress plugin before 1.0.47 does not sanitize and escape the code parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
CVE-2022-0628 (severity: MEDIUM, weakness: CWE-79)
The Mega Menu WordPress plugin before 3.0.8 does not sanitize and escape the _wpnonce parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
CVE-2022-0629 (severity: HIGH, weakness: CWE-121)
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-0630 (severity: HIGH, weakness: CWE-125)
Out-of-bounds Read in Homebrew mruby prior to 3.2.
CVE-2022-0631 (severity: MEDIUM, weakness: CWE-122)
Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.
CVE-2022-0632 (severity: MEDIUM, weakness: CWE-476)
NULL Pointer Dereference in Homebrew mruby prior to 3.2.
CVE-2022-0633 (severity: MEDIUM, weakness: CWE-863)
The UpdraftPlus WordPress plugin Free before 1.22.3 and Premium before 2.22.3 do not properly validate a user has the required privileges to access a backup's nonce identifier, which may allow any users with an account on the site (such as subscriber) to download the most recent site & database backup.
CVE-2022-0634 (severity: MEDIUM, weakness: CWE-352)
The ThirstyAffiliates WordPress plugin before 3.10.5 lacks authorization checks in the ta_insert_external_image action, allowing a low-privilege user (with a role as low as Subscriber) to add an image from an external URL to an affiliate link. Further the plugin lacks csrf checks, allowing an attacker to trick a logged in user to perform the action by crafting a special request.
CVE-2022-0635 (severity: HIGH, weakness: CWE-617)
Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named process will eventually terminate due to a failed assertion check.
CVE-2022-0636 (severity: MEDIUM, weakness: CWE-120)
A denial of service vulnerability was reported in Lenovo Thin Installer prior to version 1.3.0039 that could trigger a system crash.
CVE-2022-0637 (severity: MEDIUM, weakness: CWE-601)
open redirect in pollbot (pollbot.services.mozilla.com) in versions before 1.4.6
CVE-2022-0638 (severity: MEDIUM, weakness: CWE-352)
Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11.
CVE-2022-0639 (severity: MEDIUM, weakness: CWE-639)
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.
CVE-2022-0640 (severity: MEDIUM, weakness: CWE-79)
The Pricing Table Builder WordPress plugin before 1.1.5 does not sanitize and escape the postid parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
CVE-2022-0641 (severity: MEDIUM, weakness: CWE-79)
The Popup Like box WordPress plugin before 3.6.1 does not sanitize and escape the ays_fb_tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.