Microweber vulnerable to cross-site scripting (XSS)
Moderate severity
GitHub Reviewed
Published
Apr 13, 2023
to the GitHub Advisory Database
•
Updated Apr 21, 2023
Description
Published by the National Vulnerability Database
Apr 13, 2023
Published to the GitHub Advisory Database
Apr 13, 2023
Reviewed
Apr 14, 2023
Last updated
Apr 21, 2023
microweber/microweber prior to 1.3.3 is vulnerable to cross-site scripting (XSS) in the template selection while changing a group template.
References