Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2022-0719: Update UrlManager.php · microweber/microweber@a5925f7

Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.3.

CVE
#xss#web#git

Permalink

Browse files

Update UrlManager.php

  • Loading branch information

@bobimicroweber

bobimicroweber committed

Feb 22, 2022

1 parent 0b6b1eb commit a5925f74d39775771d4c37c8d4c1acbb762fda0a

Showing with 2 additions and 1 deletion.

  1. +2 −1 src/MicroweberPackages/Helper/UrlManager.php

3 src/MicroweberPackages/Helper/UrlManager.php

Show comments View file

@@ -276,7 +276,8 @@ public function string($skip_ajax = false)

// clear request params

$cleanParam = new HTMLClean();

$u1 = $cleanParam->cleanArray($u1);

$u1 = $cleanParam->clean($u1);

return $u1;

}

0 comments on commit a5925f7

Please sign in to comment.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907