CVE-2022-0698

Published November 25th, 2022

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

N/A

Affected

1

PROJECT

Description

Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter.

microweber/microweber

Drag and Drop Website Builder and CMS with E-commerce

GitHub

3.42K