~ / search / GHSA-3q55-66g3-p8xq

GHSA-3q55-66g3-p8xq

Cross-site Scripting in microweber

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-0926

Packages

EcosystemPackageAffectedFixed in
Packagist microweber/microweber < 1.2.12 1.2.12

Details

As written in the advisory (Markdown source, shown as plain text).

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12.

References

External links from the advisory. They lead to third-party sites.