CVE-2022-24227: Boltwire

Medium severity, CVSS 6.1. EPSS: 2.3% chance of exploitation in the next 30 days.

A cross-site scripting (XSS) vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters.

Affected products

• Boltwire Boltwire: version 7.10 only; version 8.00 only

Published 2022-02-15. Last modified 2026-06-17.