| Package | Affected versions | Patched versions |
|---|---|---|
| microweber/microweber | < 1.3.3 | 1.3.3 |
| microweber | < 1.3.3 | 1.3.3 |
microweber/microweber prior to 1.3.3 is vulnerable to stored cross-site scripting (XSS) via the X-Forwarded-For header. This was fixed in version 1.3.3.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free