CVE-2022-0698
CVE-2022-0698
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter.
CVSS 6.1 · Medium · EPSS 0.7%
- Published
- Updated
Stack: php
Affected products and versions
microweber
- Versions
- 1.3.1: Affected
No fix published
microweber/microweber Packagist
- Versions
- 0.9.346
- 0.93
- 0.931
- 0.934
- 0.951
- 1.0.3
- 1.0.4
- 1.0.5
- 1.0.6
- 1.0.7
- 1.1
- v1.2.10
- v1.2.11
- v1.2.12
- v1.2.13
- v1.2.14
- v1.2.15
- v1.2.16
- v1.2.17
- v1.2.18
- v1.2.19
- v1.2.20
- v1.2.21
- v1.2.3
- v1.2.4
- v1.2.5
- v1.2.6
- v1.2.7
- v1.2.8
- v1.2.9
- v1.3.0
- v1.3.1
- Affected ranges
- ECOSYSTEM: ≤ 1.3.1
No fix published