← All advisories

Medium severity6.1NVD Advisory· Published Oct 11, 2022· Updated Jun 17, 2026

CVE-2022-41376

CVE-2022-41376

Description

Metro UI v4.4.0 to v4.5.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Javascript function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
metro4npm	>= 4.4.0, <= 4.5.1	—

Affected products

3

Metroui/Metro UI
cpe:2.3:a:metroui:metro_ui:*:*:*:*:*:*:*:*
Range: >=4.4.0,<=4.5.0
Metro UI/Metro UIdescription
ghsa-coords
pkg:npm/metro4
Range: >= 4.4.0, <= 4.5.1

Patches

Vulnerability mechanics

References

4

alicangonullu.org/konu/138nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-633r-r4p8-pw3wghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-41376ghsaADVISORY
youtu.be/_wzGVpX54RcghsaWEB

News mentions

0

No linked articles in our index yet.