medium6.6
CVE-2022-2777
Microweber's title parameter in the body of POST request vulnerable to stored XSS
Impact
In Microweber prior to v1.3.1, the title parameter in the body of POST request when creating/editing a category is vulnerable to stored cross-site scripting.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | microweber/microweber | < 1.3.1 | 1.3.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microweber | Microweber | before 1.3.1 |