| Package | Affected versions | Patched versions |
|---|---|---|
| microweber/microweber | < 1.3.2 | 1.3.2 |
| microweber | < 1.3.2 | 1.3.2 |
Microweber versions 1.3.1 and prior are vulnerable to HTML injection that an attacker can use to redirect someone to a malicious site. A patch is available at commit 68f0721571653db865a5fa01c7986642c82e919c and expected to be part of version 1.3.2.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free