Skip to content

CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2022-0906

Unrestricted file upload leads to stored XSS in microweber/microweber

Read JSON ↗CVE.org ↗

Status: Published
Published: 2022-03-10
Updated: 2024-08-02
Assigning organization: @huntrdev

Description

Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

microweber microweber/microweber

unspecified to < 1.1.12affected

References