Medium severity6.1NVD Advisory· Published Feb 15, 2022· Updated Jun 17, 2026

CVE-2022-24227

Description

A cross-site scripting (XSS) vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Boltwire/Boltwire4 versions
cpe:2.3:a:boltwire:boltwire:7.10:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:boltwire:boltwire:7.10:*:*:*:*:*:*:*
- cpe:2.3:a:boltwire:boltwire:8.00:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 7.10 - 8.00

Patches

Vulnerability mechanics

References

github.com/Cyber-Wo0dy/report/blob/main/boltwire/v8.00/boltwire_xssnvdExploitThird Party Advisory
github.com/Nguyen-Trung-Kien/CVE/blob/main/CVE-2022-24227/CVE-2022-24227.pdfnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000