3 matches found
CVE-2022-0278
Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...
7.2CVSS5.8AI score0.00728EPSS
SaveExploits1References1
CVE-2022-0278
CVE-2022-0278 is a stored XSS vulnerability in microweber/microweber (Packagist) prior to version 1.2.11. The issue arises from insufficient input validation/output handling, enabling attacker-supplied data to execute JavaScript in a victim’s browser. Multiple sources corroborate the description ...
7.2CVSS5.3AI score0.00728EPSS
SaveExploits1References2Affected Software1
20