A Reflected Cross-site scripting (XSS) vulnerability exists in '/search' in microweber 2.0.15 and earlier allowing unauthenticated remote attackers to inject arbitrary web script or HTML via the 'keywords' parameter.
{
"github_reviewed_at": "2024-08-06T16:07:53Z",
"github_reviewed": true,
"severity": "MODERATE",
"nvd_published_at": "2024-08-06T14:16:04Z",
"cwe_ids": [
"CWE-79"
]
}