Packagist/microweber/microweber CVE-2025-70791: medium 6.1, EPSS 0.31%
Microweber has a Cross-site Scripting vulnerability
Action: Upgrade microweber/microweber to 2.0.20 or later.
composer require microweber/microweber:2.0.20Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.20 | - |
Fixed versions
| 2.0.20 |
Sources
- osv: GHSA-5jg5-xqfw-rv92
- https://nvd.nist.gov/vuln/detail/CVE-2025-70791
- https://github.com/microweber/microweber/commit/aa0791fc286d785ccd33ccc706f7bb3ed05b1d7f
- https://gist.github.com/TimRecktenwald/9615b9915a4cacda9f57bb57f13ab6d4
- https://github.com/microweber/microweber
CVE-2025-70791 · published · modified · JSON