Packagist/microweber/microweber CVE-2022-2300: medium 5.4, EPSS 0.54%

Cross-site Scripting in microweber

Action: Upgrade microweber/microweber to 1.2.19 or later.

composer require microweber/microweber:1.2.19

Affected

Fixed versions

Sources

• osv: GHSA-q6mp-562x-ggvv
• https://nvd.nist.gov/vuln/detail/CVE-2022-2300
• https://github.com/microweber/microweber/commit/70b46e231e7b2c113666745a0ab6de9a8b7ef08e
• https://github.com/microweber/microweber
• https://huntr.dev/bounties/882d6cf9-64f5-4614-a873-a3030473c817

CVE-2022-2300 · published 2022-07-05T00:00:54Z · modified 2023-11-08T04:08:15.731203Z · JSON