https://vulnerability.circl.lu/sightings/feed 2026-05-09T12:32:26.778804+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/3cf24890-07d8-4c44-ad26-670b9bbb4fa9/export 2026-05-09T12:32:27.316114+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "3cf24890-07d8-4c44-ad26-670b9bbb4fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37137", "type": "seen", "source": "https://t.me/cibsecurity/49770", "content": "\u203c CVE-2022-37137 \u203c\n\nPayMoney 3.3 is vulnerable to Stored Cross-Site Scripting (XSS) during replying the ticket. The XSS can be obtain from injecting under \"Message\" field with \"description\" parameter with the specially crafted payload to gain Stored XSS. The XSS then will prompt after that or can be access from the view ticket function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-14T14:26:36.000000Z"} 2022-09-14T14:26:36+00:00