CVE-2022-1555

Name of the Vulnerable Software and Affected Versions microweber versions prior to 1.2.16

Description The issue allows for DOM XSS, enabling the injection of arbitrary JavaScript code, which can lead to defacement of a website or stealing cookies. The software in question is a drag and drop website builder and a next-generation CMS.

Recommendations For versions prior to 1.2.16, update to version 1.2.16 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the website to minimize the risk of exploitation.