| Package | Affected versions | Patched versions |
|---|---|---|
| microweber/microweber | < 1.3.1 | 1.3.1 |
| microweber | < 1.3.1 | 1.3.1 |
In Microweber prior to v1.3.1, the title parameter in the body of POST request when creating/editing a category is vulnerable to stored cross-site scripting.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free