Skip to content
OpenAdvisories
Medium · 6.3 CVE-2022-1584 EUVD-2022-3666GHSA-f23x-4gf4-m9ff

Reflected XSS in microweber/microweber

Published May 4, 2022 · Updated Aug 3, 2024 · Assigned by @huntrdev

Vendor: microweber Product: microweber/microweber Package: microweber/microweber Ecosystem: Packagist

Description

Reflected XSS in GitHub repository microweber/microweber prior to 1.2.16. Executing JavaScript as the victim

Affected products

VendorProductAffectedFixed
microweber microweber/microweber unspecified – < 1.2.16 1.2.16

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist microweber/microweber < 1.2.16 1.2.16 GHSA-f23x-4gf4-m9ff

References