En bref
- CVE-2022-1439 est une vulnérabilité MOYENNE (CVSS 6.1) touchant microweber/microweber, microweber (microweber).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 3.3%, plus élevée que 88.4% des vulnérabilités.
- Correctif : mettre à jour vers 1.2.15 ou plus récent.
Description
Microweber prior to 1.2.15 is vulnerable to reflected cross-site scripting on demo.microweber.org/demo/module/. This allows the execution of arbitrary JavaScript as the attacked user.
NVD description
Reflected XSS on demo.microweber.org/demo/module/ in GitHub repository microweber/microweber prior to 1.2.15. Execute Arbitrary JavaScript as the attacked user. It's the only payload I found working, you might need to press "tab" but there is probably a paylaod that runs without user interaction.
Autres vulnérabilités de microweber/microweber
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free