CVE-2022-37830

CriticalCVSS 9.6

Published: 19/10/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.66%

47th percentile - higher than 47% of all known CVEs

Summary

WebJET CMS 8.6.896 by Interway a.s. is vulnerable to Cross Site Scripting (XSS). This allows an attacker to inject malicious JavaScript code into pages viewed by other users.

Risk Assessment

The risk includes potential session hijacking, administrator account takeover, or distribution of malware within the organization.

Recommendation

Immediately update WebJET CMS to the latest available version that fixes this vulnerability. Also review and sanitize all input fields in the system.

Original NVD description (English source)

Interway a.s WebJET CMS 8.6.896 is vulnerable to Cross Site Scripting (XSS).