Packagist/microweber/microweber CVE-2023-1881: high 7.4, EPSS 0.49%
Microweber vulnerable to stored cross-site scripting (XSS) via X-Forwarded-For header
Action: Upgrade microweber/microweber to 1.3.3 or later.
composer require microweber/microweber:1.3.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.3 | - |
Fixed versions
| 1.3.3 |
Sources
- osv: GHSA-hhjm-mpmf-cxg9
- https://nvd.nist.gov/vuln/detail/CVE-2023-1881
- https://github.com/microweber/microweber/commit/8d039de2d615956f6df8df0bb1045ff3be88f183
- https://github.com/microweber/microweber
- https://huntr.dev/bounties/d5ebc2bd-8638-41c4-bf72-7c906c601344
CVE-2023-1881 · published · modified · JSON