TI-2022-20942 CVE-2022-42960 · GHSA-f6j2-5hv7-j68qEqualWeb Accessibility Widget 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.1.10, 3.0.0, 3.0.1…Priority LOW 25EqualWeb Accessibility Widget 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.1.10, 3.0.0, 3.0.1, 3.0.2, 4.0.0, and 4.0.1 allows DOM XSS due to improper validation of message events to accessibility.js.CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.0039 · Published 2022-11-16 · No fix listed CWE-79