VULNERABILITY INTELLIGENCE

CVE-2022-44897

CVSS score6.1 MEDIUM

EPSS probability0.81%

CISA KEVNot currently listed

Published2023-01-31

Last modified2026-07-09

Description

A cross-site scripting (XSS) vulnerability in ApolloTheme AP PageBuilder component through 2.4.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the show_number parameter.