GHSA-8c76-mxv5-w4g8

ghsaUSosv

Stored Cross-site Scripting in Microweber

view advisory published 2022-03-16Licence: CC-BY-4.0

Microweber 1.2.11 and prior contains multiple stored cross-site scripting vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-0954US	medium5.4	3.20% (88th)	—	2022-03-15
Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in GitHub repository microweber/…

references

External citations — patches, advisories, analysis.

https://github.com/microweber/microweberPACKAGE
https://github.com/microweber/microweber/commit/955471c27e671c49e4b012e3b120b004082ac3f7WEB
https://huntr.dev/bounties/b99517c0-37fc-4efa-ab1a-3591da7f4d26WEB
https://nvd.nist.gov/vuln/detail/CVE-2022-0954ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan