Description
HTML injection attack is closely related to Cross-site Scripting (XSS). HTML injection uses HTML to deface the page. XSS, as the name implies, injects JavaScript into the page. Both attacks exploit insufficient validation of user input.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| microweber | microweber/microweber | unspecified – < 1.3.2 | 1.3.2 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | microweber/microweber | < 1.3.2 | 1.3.2 | GHSA-gm8c-w9cm-c445 |