CVE-2022-0698

Source

https://nvd.nist.gov/vuln/detail/CVE-2022-0698

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-0698.json

Aliases

• GHSA-79gx-3fm8-qxqq

Published

2022-11-25T18:15:10Z

Modified

2023-11-29T09:12:23.384076Z

Details

Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter.

References

• https://fluidattacks.com/advisories/garrix/
• https://github.com/microweber/microweber/