PT-2023-12188

CVE-2021-32856

·

Publicado

2023-02-20

·

Atualizado

2023-03-02

Descrição por

CVSS 3.1
6.1
Média
MétricasAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Microweber versions 1.2.12 and prior
Description The issue concerns a copy-paste cross-site scripting (XSS) flaw. This type of XSS requires the victim to be tricked into copying a malicious payload into the text editor.
Recommendations For versions 1.2.12 and prior, update to a version that includes a complete fix for the copy-paste XSS issue, as the fixes attempted in versions 1.2.9 and 1.2.12 are incomplete. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Impactos
Fornecedores
Produtos afetados
Identificadores relacionados
GHSA-MV37-XRMC-HF64
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾