Microweber Cross-Site Scripting Vulnerability

Microweber is a drag-and-drop online store management system from the US Microweber community. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in Microweber versions prior to 1.2.17, which stems from missing filtering and escaping of user-submitted input data in index.php and cssjson.js files. An attacker could exploit this vulnerability to execute JavaScript code on the client side.