Lucene search
Veracode Vulnerability DatabaseVERACODE:38565HistoryDec 22, 2022 - 7:29 a.m.
Reflected Cross-Site Scripting (XSS)
2022-12-2207:29:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
microweber
vulnerability
xss
attack
javascript
0.001 Low
EPSS
Percentile
29.1%
microweber/microweber is vulnerable to reflected cross-site scripting (XSS) attacks. The library does not properly validate the POST parameter namespaceMD5, allowing an attacker to inject and execute malicious JavaScript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| microweber/microweber | le | v1.3.1 | |
| microweber/microweber | le | v1.3.1 |
References
github.com/advisories/GHSA-3mmh-vq9w-4c3g
github.com/microweber/microweber/blob/v1.3.1/userfiles/modules/settings/group/language_import.php#L32
github.com/microweber/microweber/commit/df8add930ecfa7f5b18c67c3f748c137fe890906
huntr.dev/bounties/1fb2ce08-7016-45fa-b402-ec08d700e4df
huntr.dev/bounties/1fb2ce08-7016-45fa-b402-ec08d700e4df/
Related
osv
osv
Microweber vulnerable to Reflected Cross-site Scripting
2022-12-21 03:30:24
CVE-2022-4617
2022-12-21 01:15:11
cve
cve
CVE-2022-4617
2022-12-21 01:15:11
huntr
huntr
Post parameter namespaceMD5 is vulnerable to reflected XSS
2022-11-08 17:26:08
prion
prion
Cross site scripting
2022-12-21 01:15:00
nvd
nvd
CVE-2022-4617
2022-12-21 01:15:11
cvelist
cvelist
github
github
Microweber vulnerable to Reflected Cross-site Scripting
2022-12-21 03:30:24