Headline
GHSA-gmh3-x5w7-jg5m: Cross-site Scripting in Microweber
Prior to Microweber v1.2.20, due to improper neutralization of input, an attacker can steal tokens to perform cross-site request forgery, fetch contents from same-site and redirect a user.
Cross-site Scripting in Microweber
Moderate severity GitHub Reviewed Published Jul 10, 2022 • Updated Jul 12, 2022
Related news
CVE-2022-2353: update · microweber/microweber@79c6914
Prior to microweber/microweber v1.2.20, due to improper neutralization of input, an attacker can steal tokens to perform cross-site request forgery, fetch contents from same-site and redirect a user.