GHSA-prff-6j8q-vrv7

ghsaUSosv

Cross-site Scripting in microweber

view advisory published 2022-01-28Licence: CC-BY-4.0

There is a persistent XSS Vulnerability exsists in the checkout page where we can able to execute any javascription in the last name field

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-0379US	medium5.4	0.86% (58th)	—	2022-01-26
Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.