PT-2022-21312 · Unknown · Microweber
CVE-2022-3242
·
Published
2022-09-20
·
Updated
2022-09-21
CVSS v3.1
4.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
microweber/microweber versions prior to 1.3.2
Description
The issue concerns code injection in the microweber/microweber GitHub repository. It is also described as an HTML injection vulnerability that can be exploited by an attacker to redirect users to a malicious site.
Recommendations
For versions prior to 1.3.2, update to version 1.3.2 or apply the patch available at commit 68f0721571653db865a5fa01c7986642c82e919c to resolve the issue.
Exploit
Fix
Code Injection
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Microweber