CVE-2022-42960: Equalweb Accessibility Widget

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

EqualWeb Accessibility Widget 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.1.10, 3.0.0, 3.0.1, 3.0.2, 4.0.0, and 4.0.1 allows DOM XSS due to improper validation of message events to accessibility.js.

Affected products

• Equalweb Equalweb Accessibility Widget: version 2.0.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; version 2.1.10 only; …

Published 2022-11-17. Last modified 2026-06-17.