Skip to content
OpenAdvisories
High · 8.8 CVE-2022-1555 EUVD-2022-2694GHSA-6346-5r4h-ff5x

DOM XSS in microweber ver 1.2.15 in microweber/microweber

Published May 4, 2022 · Updated Aug 3, 2024 · Assigned by @huntrdev

Description

DOM XSS in microweber ver 1.2.15 in GitHub repository microweber/microweber prior to 1.2.16. inject arbitrary js code, deface website, steal cookie...

Affected products

VendorProductAffectedFixed
microweber microweber/microweber unspecified – < 1.2.16 1.2.16

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist microweber/microweber <= 1.2.15 — GHSA-6346-5r4h-ff5x

References