Packagist/microweber/microweber CVE-2022-2495: medium 4.8, EPSS 0.69%
Microweber Stored Cross-site Scripting before v1.2.20
Action: Upgrade microweber/microweber to 1.2.20 or later.
composer require microweber/microweber:1.2.20Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.20 | - |
Fixed versions
| 1.2.20 |
Sources
- osv: GHSA-xg72-6c83-ghh4
- https://nvd.nist.gov/vuln/detail/CVE-2022-2495
- https://github.com/microweber/microweber/commit/d35e691e72d358430abc8e99f5ba9eb374423b9f
- https://github.com/microweber/microweber
- https://huntr.dev/bounties/00affb69-275d-4f4c-b419-437922bc7798
CVE-2022-2495 · published · modified · JSON