Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-0906 EUVD-2022-1440GHSA-hf4q-52x6-4p57

Unrestricted file upload leads to stored XSS in microweber/microweber

Published Mar 10, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Vendor: microweber Product: microweber/microweber Package: microweber/microweber Ecosystem: Packagist

Description

Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12.

Affected products

VendorProductAffectedFixed
microweber microweber/microweber unspecified – < 1.1.12 1.1.12

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist microweber/microweber < 1.2.12 1.2.12 GHSA-hf4q-52x6-4p57

References