Skip to content
OpenAdvisories
Medium · 6.8 CVE-2022-2495 EUVD-2022-6449GHSA-xg72-6c83-ghh4

Cross-site Scripting (XSS) - Stored in microweber/microweber

Published Jul 22, 2022 · Updated Aug 3, 2024 · Assigned by @huntrdev

Vendor: microweber Product: microweber/microweber Package: microweber/microweber Ecosystem: Packagist

Description

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.21.

Affected products

VendorProductAffectedFixed
microweber microweber/microweber unspecified – < 1.2.21 1.2.21

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist microweber/microweber < 1.2.20 1.2.20 GHSA-xg72-6c83-ghh4

References