Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-08213
HistoryJan 23, 2022 - 12:00 a.m.

microweber cross-site scripting vulnerability

2022-01-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.001 Low

EPSS

Percentile

21.6%

Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in microweber, which stems from a lack of data validation filtering of user-supplied data and output. An attacker could exploit the vulnerability to execute JavaScript code on the client side.

CPENameOperatorVersion
microweber microweberlt1.2.11

0.001 Low

EPSS

Percentile

21.6%