medium6.8
CVE-2022-0954
Stored Cross-site Scripting in Microweber
Impact
Microweber 1.2.11 and prior contains multiple stored cross-site scripting vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | microweber/microweber | <= 1.2.11 | 1.2.12 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microweber | Microweber | before 1.2.11 |