Skip to content
OpenAdvisories
Medium · 5.7 Scanner template CVE-2022-0963 EUVD-2022-1508GHSA-q3x2-jvp3-wj78

Unrestricted XML Files Leads to Stored XSS in microweber/microweber

Published Mar 15, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Description

Unrestricted XML Files Leads to Stored XSS in GitHub repository microweber/microweber prior to 1.2.12.

Affected products

VendorProductAffectedFixed
microweber microweber/microweber unspecified – < 1.2.12 1.2.12

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist microweber/microweber < 1.2.12 1.2.12 GHSA-q3x2-jvp3-wj78

References