CVE-2022-41376: Metroui Metro UI

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Metro UI v4.4.0 to v4.5.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Javascript function.

Affected products

• Metroui Metro UI: from 4.4.0, up to and including 4.5.0

Published 2022-10-11. Last modified 2026-06-17.