Lucene search
Veracode Vulnerability DatabaseVERACODE:34593HistoryMar 10, 2022 - 4:49 a.m.
Cross-Site Scripting (XSS)
2022-03-1004:49:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.003 Low
EPSS
Percentile
68.5%
microweber/microweber is vulnerable to cross-site scripting. The vulnerability exists in saveCommentEdit function of AdminCommentController.php because this allows HTML tags in the blog comments which allows a malicious attacker to inject and execute html payloads.
| CPE | Name | Operator | Version |
|---|---|---|---|
| microweber/microweber | le | v1.2.11 | |
| microweber/microweber | le | v1.2.11 |
Related
cve
cve
CVE-2022-0896
2022-03-09 12:15:07
osv
osv
Improper Neutralization of Special Elements Used in a Template Engine in microweber
2022-03-10 00:00:40
CVE-2022-0896
2022-03-09 12:15:07
cvelist
cvelist
cnvd
cnvd
Microweber Cross-Site Scripting Vulnerability (CNVD-2022-20098)
2022-03-11 00:00:00
prion
prion
Input validation
2022-03-09 12:15:00
nvd
nvd
CVE-2022-0896
2022-03-09 12:15:07
huntr
huntr
Improper Neutralization of Special Elements Used in a Template Engine
2022-03-06 15:50:50
github
github