~ / search / GHSA-97h9-p9f8-4p3r

GHSA-97h9-p9f8-4p3r

Microweber Cross-site Scripting vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-33299

Packages

EcosystemPackageAffectedFixed in
Packagist microweber/microweber <= 2.0.9 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Name and Last Name parameters in the endpoint /admin/module/view?type=users

References

External links from the advisory. They lead to third-party sites.