p PatchFirst

CVE-2022-3245

CVE-2022-3245 · Code Injection in display of tag title on saving tags in microweber/microweber

This page contains facts from public vulnerability sources. Check the original advisory before updating.

HTML injection attack is closely related to Cross-site Scripting (XSS). HTML injection uses HTML to deface the page. XSS, as the name implies, injects JavaScript into the page. Both attacks exploit insufficient validation of user input.

CVSS 4.3 · Medium · EPSS 0.7% · Fix available

Published
Updated

Stack: php

Affected products and versions

  • microweber/microweber

    Versions
    • ≥ unspecified, < 1.3.2: Affected (custom)

    Update to 1.3.2

  • microweber/microweber Packagist

    Versions
    • 0.9.346
    • 0.93
    • 0.931
    • 0.934
    • 0.951
    • 1.0.3
    • 1.0.4
    • 1.0.5
    • 1.0.6
    • 1.0.7
    • 1.1
    • v1.2.10
    • v1.2.11
    • v1.2.12
    • v1.2.13
    • v1.2.14
    • v1.2.15
    • v1.2.16
    • v1.2.17
    • v1.2.18
    • v1.2.19
    • v1.2.20
    • v1.2.21
    • v1.2.3
    • v1.2.4
    • v1.2.5
    • v1.2.6
    • v1.2.7
    • v1.2.8
    • v1.2.9
    • v1.3.0
    • v1.3.1
    Affected ranges
    • ECOSYSTEM: < 1.3.2

    Update to 1.3.2

Original sources

Check your server →