| Package | Affected versions | Patched versions |
|---|---|---|
| microweber/microweber | ≤ 1.2.11 | |
| microweber | < 1.2.12 | 1.2.12 |
Microweber is drag and drop website builder and CMS with E-commerce. The microweber prior 1.2.12 application allows large characters to insert in the input field "post title" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. The post title input can be limited to 500 characters or max 1000 characters as a workaround.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free