CVE-2021-32856
CVE-2021-32856 · Microweber vulnerable to Cross-site Scripting
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting (XSS). For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted in versions 1.2.9 and 1.2.12, but it is incomplete.
CVSS 6.1 · Media · EPSS 0,6%
- Publicación
- Actualización
Pila tecnológica: php
Productos y versiones afectados
microweber
- Versiones
- ≥ 1.2.12, ≤ 1.2.12: Afectada (custom)
Sin corrección publicada
microweber/microweber Packagist
- Versiones
- 0.9.346
- 0.93
- 0.931
- 0.934
- 0.951
- 1.0.3
- 1.0.4
- 1.0.5
- 1.0.6
- 1.0.7
- 1.1
- v1.2.10
- v1.2.11
- v1.2.12
- v1.2.3
- v1.2.4
- v1.2.5
- v1.2.6
- v1.2.7
- v1.2.8
- v1.2.9
- Intervalos de versiones afectados
- ECOSYSTEM: ≤ 1.2.12
Sin corrección publicada