GHSA-4P92-FV6V-FHFJ Cross-site Scripting in microweber

Microweber prior to 1.2.11 is vulnerable to reflected cross-site scripting...

CVE-2022-0723

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.11...

CVE-2022-0723

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.11...

Cross site scripting

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.11...

CVE-2022-0723

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.11...

CVE-2022-0723 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.11...

CVE-2022-0723

CVE-2022-0723 affects microweber/microweber prior to 1.2.11, with a reflected XSS due to insufficient validation of client-side data. Multiple sources (NVD, Red Hat, OSV, CVE lists) confirm reflected XSS in this version. The vulnerability is mitigated by upgrading to 1.2.11 or later, as indicated...

CVE-2022-0723 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.11...

CVE-2022-0763

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3...

CVE-2022-0762

Incorrect Authorization in GitHub repository microweber/microweber prior to 1.3...

CVE-2022-0762

Incorrect Authorization in GitHub repository microweber/microweber prior to 1.3...

CVE-2022-0763

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3...

Authorization

Incorrect Authorization in GitHub repository microweber/microweber prior to 1.3...

CVE-2022-0763 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3...

CVE-2022-0763

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3...

CVE-2022-0762 Incorrect Authorization in microweber/microweber

Incorrect Authorization in GitHub repository microweber/microweber prior to 1.3...

CVE-2022-0762 Incorrect Authorization in microweber/microweber

Incorrect Authorization in GitHub repository microweber/microweber prior to 1.3...

CVE-2022-0762

Incorrect Authorization in GitHub repository microweber/microweber prior to 1.3...

CVE-2022-0762

The CVE-2022-0762 entry maps to a Microweber logic flaw: before version 1.3, business logic errors lead to incorrect authorization and allow adding deleted products to a cart and purchasing them. The root cause is unauthorized access within the microweber/microweber repository’s logic. A remediat...

PT-2022-13418 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber versions prior to 1.3 Description: The issue concerns business logic errors and incorrect authorization in the microweber repository. This allows users to add deleted products to a cart and buy them, exposing resources to the wrong...