CVE-2022-28368
Cross-site scripting in Dompdf Project
CVSS score
9.8
EPSS probability
%82.9
Risk score
8.1
Published
4 y ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmented initial access campaign targeting WordPress sites, e-commerce platforms, and critical infrastructure entities in Ukraine. The activity, which brings together commodity offensive tools like Cobalt Strike with an AI orchestration layer powered by Anthropic's Claude Code, has been attributed
Similar Vulnerabilities
7.5
CVE-2026-59942Uncontrolled resource consumption in Dompdf Project
Patch verified Public Exploits:1EPSS %1
7.5
CVE-2026-59941Uncontrolled resource consumption in Dompdf Project
Patch verified Public Exploits:2EPSS %1
7.5
CVE-2026-55555Vulnerability in Dompdf Project
Patch verified Public Exploits:1EPSS %1
7.5
CVE-2026-55554Improper input validation in Dompdf Project
Patch status unknown Public Exploits:1EPSS %0
5.3
CVE-2026-56722Improper input validation in Dompdf Project
Patch verified Public Exploits:1EPSS %0
5.3
CVE-2026-59943Vulnerability in Dompdf Project
Patch verified Public Exploits:1EPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-28368"