PT-2023-12188
CVE-2021-32856
·
Published
2023-02-20
·
Updated
2023-03-02
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Microweber versions 1.2.12 and prior
Description
The issue concerns a copy-paste cross-site scripting (XSS) flaw. This type of XSS requires the victim to be tricked into copying a malicious payload into the text editor.
Recommendations
For versions 1.2.12 and prior, update to a version that includes a complete fix for the copy-paste XSS issue, as the fixes attempted in versions 1.2.9 and 1.2.12 are incomplete. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾