Cross Site Scripting in Microweber

2021-10-2519:43:39

Google

osv.dev

0.001 Low

EPSS

Percentile

35.3%

JSON

Cross Site Scripting (XSS). vulnerability exists in Microweber CMS 1.2.7 via the Login form, which could let a malicious user execute Javascript by Inserting code in the request form.

CPENameOperatorVersion
microweber/microwebereq1.2.4
microweber/microwebereq1.0.3
microweber/microwebereq1.2.5
microweber/microwebereq1.2.6
microweber/microwebereq1.1
microweber/microwebereq1.0.7
microweber/microwebereq0.931
microweber/microwebereq0.951
microweber/microwebereq1.2.7
microweber/microwebereq0.934

Name	Operator	Version
microweber/microweber	eq	1.2.4
microweber/microweber	eq	1.0.3
microweber/microweber	eq	1.2.5
microweber/microweber	eq	1.2.6
microweber/microweber	eq	1.1
microweber/microweber	eq	1.0.7
microweber/microweber	eq	0.931
microweber/microweber	eq	0.951
microweber/microweber	eq	1.2.7
microweber/microweber	eq	0.934