Lucene search
Veracode Vulnerability DatabaseVERACODE:40286HistoryApr 26, 2023 - 5:31 a.m.
Cross-Site Scripting (XSS)
2023-04-2605:31:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
microweber
software
cross-site scripting
vulnerability
user-input sanitization
x-forwarded-for
javascript
browser
0.001 Low
EPSS
Percentile
23.5%
microweber/microweber is vulnerable to Cross-Site Scripting (XSS). The vulnerability is due to a lack of user-input sanitization in the X-Forwarded-For header, which allows an attacker to inject and execute arbitrary JavaScript into the browser.
| CPE | Name | Operator | Version |
|---|---|---|---|
| microweber/microweber | le | 1.3.3.x-dev | |
| microweber/microweber | le | 1.3.3.x-dev |
Related
nvd
nvd
CVE-2023-1881
2023-04-05 17:15:07
prion
prion
Cross site scripting
2023-04-05 17:15:00
github
github
cvelist
cvelist
CVE-2023-1881 Cross-site Scripting (XSS) - Stored in microweber/microweber
2023-04-05 00:00:00
huntr
huntr
Stored XSS From Visitor to Acc Takeover
2023-02-16 19:27:16
cve
cve
CVE-2023-1881
2023-04-05 17:15:07
osv
osv
CVE-2023-1881
2023-04-05 17:15:07