Microweber Cross Site Scripting (XSS) vulnerability

MEDIUM 6.1CVE-2024-41380 · GHSA-hf66-xfgj-42g8 · Published 05/08/2024 · updated 17/06/2026

Package	Affected versions	Patched versions
microweber/microweber Packagist	`≤ 2.0.16`	No fix yet
microweber microweber	`= 2.0.16`	No fix yet

Description

Microweber 2.0.16 was discovered to contain a Cross Site Scripting (XSS) vulnerability via userfiles\modules\tags\add_tagging_tagged.php.

NVD description

microweber 2.0.16 was discovered to contain a Cross Site Scripting (XSS) vulnerability via userfiles\modules\tags\add_tagging_tagged.php.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.