microweber/microweber is vulnerable to Cross-Site Scripting (XSS). The vulnerability is due to a lack of santization of user inputs in the admin settings, which allows an admin authenticated attacker to inject and execute arbitrary JavaScript into the system.