GHSA-rgf9-j7gv-rq22

Microweber Cross-site Scripting vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-5244

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	microweber/microweber	<= 1.3.4	no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber 1.3.4 and prior. A patch is available and anticipated to be part of the 2.x branch.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2023-5244 advisory
https://github.com/microweber/microweber/commit/1cb846f8f54ff6f5c668f3ae64dd81740a7e8968 web
https://github.com/microweber/microweber package
https://huntr.dev/bounties/a3bd58ba-ca59-4cba-85d1-799f73a76470 web