GHSA-xg72-6c83-ghh4

Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/07/GHSA-xg72-6c83-ghh4/GHSA-xg72-6c83-ghh4.json

Aliases

• CVE-2022-2495

Published

2022-07-23T00:00:25Z

Modified

2022-07-29T22:27:38Z

Details

Microwerber prior to version 1.2.20 is vulnerable to stored Cross-site Scripting (XSS).

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-2495
• https://github.com/microweber/microweber/commit/d35e691e72d358430abc8e99f5ba9eb374423b9f
• https://github.com/microweber/microweber
• https://huntr.dev/bounties/00affb69-275d-4f4c-b419-437922bc7798