GHSA-9w7h-3wwh-6m5q
Cross-site Scripting in Microweber
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | microweber/microweber | < 1.2.15 | 1.2.15 |
Details
As written in the advisory (Markdown source, shown as plain text).
Microweber prior to 1.2.15 is vulnerable to reflected cross-site scripting on demo.microweber.org/demo/module/. This allows the execution of arbitrary JavaScript as the attacked user.
References
External links from the advisory. They lead to third-party sites.