← Database

CVE-2022-42960

MEDIUM CVSS: 5.4 Published: 2022-11-17 Modified: 2026-06-17

Description

EqualWeb Accessibility Widget 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.1.10, 3.0.0, 3.0.1, 3.0.2, 4.0.0, and 4.0.1 allows DOM XSS due to improper validation of message events to accessibility.js.

Affected Platforms

Equalweb Equalweb Accessibility Widget

Weakness Type

CWE-79, CWE-79

References