{"action":"Upgrade microweber/microweber to 2.0.20 or later.","affected":[{"fixed":"2.0.20","introduced":"0"}],"component":"microweber/microweber","cve_ids":["CVE-2025-70792"],"ecosystem":"Packagist","epss":0.00315,"exploited":false,"fixed_versions":["2.0.20"],"ghsa_id":"GHSA-6w5w-jx4x-vjvw","id":"tcs_01M5KEXEB8BH409583NCGJJ4TK","modified_at":"2026-02-05T22:11:21.952136Z","published_at":"2026-02-05T18:30:32Z","references":["https://osv.dev/vulnerability/GHSA-6w5w-jx4x-vjvw","https://nvd.nist.gov/vuln/detail/CVE-2025-70792","https://github.com/microweber/microweber/commit/aa0791fc286d785ccd33ccc706f7bb3ed05b1d7f","https://gist.github.com/TimRecktenwald/f4b0d1edbb87e75c17c639ca0bacba57","https://github.com/microweber/microweber"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-6w5w-jx4x-vjvw","url":"https://osv.dev/vulnerability/GHSA-6w5w-jx4x-vjvw"}],"summary":"Microweber Cross-site Scripting vulnerability"}