Medium · 5.4 CVE-2023-47379 EUVD-2023-2992GHSA-jmwm-w2rm-prv9

Microweber Cross-site Scripting vulnerability

Published Nov 8, 2023 · Updated Sep 3, 2024 · Assigned by mitre

Description

Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting (XSS) via the profile picture file upload functionality.

Ecosystem	Package	Affected	Fixed	Record
Packagist	microweber/microweber	< 2.0.3	2.0.3	GHSA-jmwm-w2rm-prv9