CVE-2022-0698

Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter...

CVE-2022-0698

creationtimestamp| type| source ---|---|--- 2022-11-25 20:15:45+00:00| seen| https://t.me/cibsecurity/53522 2025-04-25 18:08:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13492...

CVE-2022-0698

Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter...

CVE-2022-0698

Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter...

CVE-2022-0698

The connected documents confirm a concrete vulnerability: Microweber 1.3.1 contains an XSS on the 'select-file' parameter that allows an unauthenticated user to perform an account takeover. This is described across CVE sources (e.g., Red Hat, NVD, GHSA, Veracode) as a Cross-site Scripting issue w...