OS Command Injection in Microweber

HIGH 7.2CVE-2022-0557 · GHSA-vm37-j55j-8655 · Published 11/02/2022 · updated 17/06/2026

Package	Affected versions	Patched versions
microweber/microweber Packagist	`< 1.2.11`	`1.2.11`
microweber microweber	`< 1.2.11`	`1.2.11`

Description

Microweber is a content management system with drag and drop. Prior to version 1.2.11, Microweber is vulnerable to OS Command Injection.

NVD description

OS Command Injection in Packagist microweber/microweber prior to 1.2.11.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.