Description
Cockpit is a content management system that allows addition of content management functionality to any site. In versions 0.12.2 and prior, bad HTML sanitization in `htmleditor.js` may lead to cross-site scripting (XSS) issues. There are no known patches for this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| microweber | microweber | 0.12.2 – ≤ 0.12.2 | — |