Lucene search
PRIOn knowledge basePRION:CVE-2021-32856HistoryFeb 21, 2023 - 3:15 p.m.
Cross site scripting
2023-02-2115:15:00
PRIOn knowledge base
www.prio-n.com
2
microweber
xss vulnerability
cross-site scripting
vulnerable version 1.2.12
text editor
incomplete fix
0.001 Low
EPSS
Percentile
25.5%
Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting (XSS). For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted in versions 1.2.9 and 1.2.12, but it is incomplete.
| CPE | Name | Operator | Version |
|---|---|---|---|
| microweber | le | 1.2.12 |
Related
cve
cve
CVE-2021-32856
2023-02-21 15:15:11
CVE-2021-32861
2023-02-21 15:15:11
nvd
nvd
CVE-2021-32856
2023-02-21 15:15:11
CVE-2021-32861
2023-02-21 15:15:11
veracode
veracode
Cross-site Scripting (XSS)
2022-06-20 05:37:39
osv
osv
Microweber Cross-site Scripting vulnerability
2023-02-21 15:30:23
CVE-2021-32856
2023-02-21 15:15:11
cvelist
cvelist
CVE-2021-32856 Microweber vulnerable to Cross-site Scripting
2023-02-20 00:00:00
github
github
Microweber Cross-site Scripting vulnerability
2023-02-21 15:30:23