~ / search / GHSA-prff-6j8q-vrv7

GHSA-prff-6j8q-vrv7

Cross-site Scripting in microweber

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-0379

Packages

EcosystemPackageAffectedFixed in
Packagist microweber/microweber < 1.2.11 1.2.11

Details

As written in the advisory (Markdown source, shown as plain text).

There is a persistent XSS Vulnerability exsists in the checkout page where we can able to execute any javascription in the last name field

References

External links from the advisory. They lead to third-party sites.