CVE-2022-44961

MediumCVSS 5.4

Published: 02/12/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

32th percentile - higher than 32% of all known CVEs

Summary

A cross-site scripting (XSS) vulnerability was discovered in webtareas 2.4p5 in the component /forums/editforum.php. It allows an attacker to inject arbitrary web scripts or HTML via the Name field.

Risk Assessment

The risk involves arbitrary script execution in the victim's browser, potentially leading to session hijacking, redirection, or data theft.

Recommendation

Immediately update to the latest version of webtareas and implement input validation and output encoding for form fields.

Original NVD description (English source)

webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /forums/editforum.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.