Microweber File Upload Vulnerability (CNVD-2022-20514)

Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. A file upload vulnerability exists in versions of Microweber prior to 1.2.12, which stems from a lack of validation of uploaded files by the application. An attacker could exploit this vulnerability to upload XML files, leading to cross-site scripting attacks.