| Package | Affected versions | Patched versions |
|---|---|---|
| microweber/microweber | ≤ 1.3.4 | |
| microweber | < 2.0 | 2.0 |
Microweber 1.3.4 and prior is vulnerable to stored cross-site scripting via an alert on the Editing page. This issue is fixed in commit 42efa981a2239d042d910069952d6276497bdcf1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free