CVE-2022-44959

MediumCVSS 5.4

Published: 02/12/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.41%

33th percentile - higher than 33% of all known CVEs

Summary

A cross-site scripting (XSS) vulnerability was discovered in webtareas 2.4p5 in the component /meetings/listmeetings.php. Attackers can inject arbitrary web scripts or HTML via the Name field, leading to script execution in the victim's browser.

Risk Assessment

The risk includes session hijacking, redirection to malicious sites, or theft of sensitive data through arbitrary code execution in the victim's browser context.

Recommendation

Immediately update webtareas to the latest version and apply input filtering and encoding on the Name field to prevent script injection.

Original NVD description (English source)

webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /meetings/listmeetings.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.