GitHub Advisoryadvisory · Packagist

GHSA-w7x8-cq7r-g5g9 Cross Site Scripting in Microweber

MEDIUM Published 2021-10-25 Modified 2021-10-22 Official page ↗
Aliases
CVE-2021-33988
Ecosystem
Packagist
Packages
microweber/microweber
Severity
Moderate
Weaknesses
CWE-79
Reviewed
2021-10-22

Affected packages

• Packagist microweber/microweber: < 1.2.8 → fixed in 1.2.8

Description

Cross Site Scripting (XSS). vulnerability exists in Microweber CMS 1.2.7 via the Login form, which could let a malicious user execute Javascript by Inserting code in the request form.

Related

Alias · CVE (1)

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References