medium6.1
CVE-2022-4617
Microweber vulnerable to Reflected Cross-site Scripting
Impact
Microweber versions 1.3.1 and prior are vulnerable to Reflected Cross-site Scripting (XSS). A patch is available on the 1.4, dev, and laravel-sail branches.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | microweber/microweber | <= 1.3.1 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microweber | Microweber | through 1.3.1 |