VULNERABILITY INTELLIGENCE

CVE-2022-24227

CVSS score6.1 MEDIUM

EPSS probability2.26%

CISA KEVNot currently listed

Published2022-02-15

Last modified2026-06-17

Description

A cross-site scripting (XSS) vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters.