Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12.