CVE-2022-41441

MediumCVSS 6.1

Published: 20/01/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

5.19%

91th percentile - higher than 91% of all known CVEs

Summary

Multiple XSS vulnerabilities were found in ReQlogic version 11.3. An attacker can inject malicious JavaScript or HTML via the POBatch and WaitDuration parameters.

Risk Assessment

The risk involves arbitrary script execution in the victim's browser, potentially leading to session theft, redirection to malicious sites, or data theft.

Recommendation

Immediately update ReQlogic to the latest version and apply input filtering for the POBatch and WaitDuration parameters.

Original NVD description (English source)

Multiple cross-site scripting (XSS) vulnerabilities in ReQlogic v11.3 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the POBatch and WaitDuration parameters.