Skip to content
OpenAdvisories
High · 8.0 CVE-2022-0930 EUVD-2022-1269GHSA-2cv6-6437-39p2

File upload filter bypass leading to stored XSS in microweber/microweber

Published Mar 12, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Vendor: microweber Product: microweber/microweber Package: microweber/microweber Ecosystem: Packagist

Description

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12.

Affected products

VendorProductAffectedFixed
microweber microweber/microweber unspecified – < 1.2.12 1.2.12

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist microweber/microweber < 1.2.12 1.2.12 GHSA-2cv6-6437-39p2

References