GHSA-232p-59mg-f98pMediumCVSS 6.1

Microweber Cross-site Scripting can result in redirection to a malicious site

Published
September 21, 2022
Last Modified
January 30, 2023

🔗 CVE IDs covered (1)

CVE-2022-3242 →

📋 Description

Microweber versions 1.3.1 and prior are vulnerable to HTML injection that an attacker can use to redirect someone to a malicious site. A patch is available at commit 68f0721571653db865a5fa01c7986642c82e919c and expected to be part of version 1.3.2.

🎯 Affected products1

  • composer/microweber/microweber:<= 1.3.1

🔗 References (4)