{"action":"Upgrade microweber/microweber to 1.2.12 or later.","affected":[{"fixed":"1.2.12","introduced":"0"}],"component":"microweber/microweber","cve_ids":["CVE-2022-0906"],"ecosystem":"Packagist","epss":0.00622,"exploited":false,"fixed_versions":["1.2.12"],"ghsa_id":"GHSA-hf4q-52x6-4p57","id":"tcs_01M5KF3K5ZCSNEV2YEFPR50HPX","modified_at":"2023-11-08T04:07:42.253710Z","published_at":"2022-03-11T00:02:36Z","references":["https://osv.dev/vulnerability/GHSA-hf4q-52x6-4p57","https://nvd.nist.gov/vuln/detail/CVE-2022-0906","https://github.com/microweber/microweber/commit/d9bae9df873c2d2a13a2eb08d512019d49ebca68","https://github.com/microweber/microweber","https://huntr.dev/bounties/87ed3b42-9824-49b0-91a5-fd908a0601e8"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-hf4q-52x6-4p57","url":"https://osv.dev/vulnerability/GHSA-hf4q-52x6-4p57"}],"summary":"Unrestricted file upload leads to stored cross-site scripting in Microweber"}