GHSA-jjp3-m93h-5jm4

ghsaUSosv

Cross-site Scripting in microweber

view advisory published 2022-03-12Licence: CC-BY-4.0

Microweber drag and drop website builder and CMS with e-commerce. Cross-site Scripting (XSS) discovered in microweber prior to 1.2.12. There is currently no known workaround, users are recommended to update to version 1.2.12.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-0928US	medium5.4	2.39% (84th)	—	2022-03-11
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.12.

references

External citations — patches, advisories, analysis.

https://github.com/microweber/microweberPACKAGE
https://github.com/microweber/microweber/commit/fc9137c031f7edec5f50d73b300919fb519c924aWEB
https://huntr.dev/bounties/085aafdd-ba50-44c7-9650-fa573da29bcdWEB
https://nvd.nist.gov/vuln/detail/CVE-2022-0928ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan