CVE-2022-50802

MEDIUM 6.1CVE-2022-50802 · Published 30/12/2025 · updated 17/06/2026

In short

CVE-2022-50802 is a MEDIUM (CVSS 6.1) vulnerability affecting etap safety manager (etaplighting).
Chance of exploitation in the next 30 days (EPSS): 0.35%, higher than 29.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
etap safety manager etaplighting	`= 1.0.0.32`	No fix yet

Description

ETAP Safety Manager 1.0.0.32 contains a cross-site scripting vulnerability in the 'action' GET parameter that allows unauthenticated attackers to inject malicious HTML and JavaScript. Attackers can craft specially formed requests to execute arbitrary scripts in victim browser sessions, potentially stealing credentials or performing unauthorized actions.

References

cxsecurity.com/issue/WLB-2022090031 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/235743 · Third Party Advisory
packetstormsecurity.com/files/168339 · Third Party Advisory
etaplighting.com · Product
vulncheck.com/advisories/etap-safety-manager-unauthenticated-reflected-cross-site-scripting-via-action-parameter · Third Party Advisory
zeroscience.mk/en/vulnerabilities/ZSL-2022-5711.php · Third Party Advisory

More vulnerabilities in etap safety manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

etap safety manager

etaplighting

= 1.0.0.32

No fix yet

Description