Skip to content
OpenAdvisories
Medium · 6.3 CVE-2022-1504 EUVD-2022-1657GHSA-6xj3-fhrf-rjgc

XSS in /demo/module/?module=HERE in microweber/microweber

Published Apr 27, 2022 · Updated Aug 3, 2024 · Assigned by @huntrdev

Vendor: microweber Product: microweber/microweber Package: microweber/microweber Ecosystem: Packagist

Description

XSS in /demo/module/?module=HERE in GitHub repository microweber/microweber prior to 1.2.15. Typical impact of XSS attacks.

Affected products

VendorProductAffectedFixed
microweber microweber/microweber unspecified – < 1.2.15 1.2.15

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist microweber/microweber < 1.2.15 1.2.15 GHSA-6xj3-fhrf-rjgc

References