| Package | Affected versions | Patched versions |
|---|---|---|
| microweber/microweber | < 1.3.3 | 1.3.3 |
| microweber | < 1.3.3 | 1.3.3 |
microweber/microweber prior to 1.3.3 is vulnerable to command injection in the "first name" field. This allows for server-side template injection, which can lead to arbitrary code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free