CVE-2022-44955

MediumCVSS 5.4

Published: 02/12/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

32th percentile - higher than 32% of all known CVEs

Summary

A cross-site scripting (XSS) vulnerability was discovered in the Chat function of webtareas 2.4p5. This flaw allows attackers to inject arbitrary web scripts or HTML via the Messages field.

Risk Assessment

An attacker can steal user sessions, redirect victims to malicious sites, or perform other unauthorized actions within the victim's browser context.

Recommendation

Update webtareas to the latest version and implement input filtering and encoding in the Chat function.

Original NVD description (English source)

webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the Chat function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Messages field.