CVE-2022-0282

Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11.
Configurations

Configuration 1 (hide)

cpe:2.3:a:microweber:microweber:*:*:*:*:*:*:*:*

History

21 Nov 2024, 06:38

Type Values Removed Values Added
CVSS v2 : 5.0
v3 : 7.5
v2 : 5.0
v3 : 4.3
References () https://github.com/microweber/microweber/commit/51b5a4e3ef01e587797c0109159a8ad9d2bac77a - Patch, Third Party Advisory () https://github.com/microweber/microweber/commit/51b5a4e3ef01e587797c0109159a8ad9d2bac77a - Patch, Third Party Advisory
References () https://huntr.dev/bounties/8815b642-bd9b-4737-951b-bde7319faedd - Exploit, Third Party Advisory () https://huntr.dev/bounties/8815b642-bd9b-4737-951b-bde7319faedd - Exploit, Third Party Advisory

02 Aug 2023, 09:15

Type Values Removed Values Added
Summary Code Injection in Packagist microweber/microweber prior to 1.2.11. Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11.

21 Jul 2023, 16:53

Type Values Removed Values Added
CWE CWE-94 CWE-79

Information

Published : 2022-01-20 12:15

Updated : 2024-11-21 06:38


NVD link : CVE-2022-0282

Mitre link : CVE-2022-0282

CVE.ORG link : CVE-2022-0282


JSON object : View

Products Affected

microweber

  • microweber
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')