~ / search / GHSA-hf66-xfgj-42g8

GHSA-hf66-xfgj-42g8

Microweber Cross Site Scripting (XSS) vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-41380

Packages

EcosystemPackageAffectedFixed in
Packagist microweber/microweber <= 2.0.16 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Microweber 2.0.16 was discovered to contain a Cross Site Scripting (XSS) vulnerability via userfiles\modules\tags\add_tagging_tagged.php.

References

External links from the advisory. They lead to third-party sites.