CVE-2023-47379

Published November 8th, 2023

View on NVD ↗

CVSS v3

5.4

MEDIUM

CVSS v2

N/A

Affected

1

PROJECT

Description

Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting (XSS) via the profile picture file upload functionality.

microweber/microweber

Drag and Drop Website Builder and CMS with E-commerce

GitHub

3.42K