CVE-2021-33988

EPSS 0.83%

Cross Site Scripting in Microweber

Published: 10/25/2021Modified: 12/2/2024

Description

Cross Site Scripting (XSS). vulnerability exists in Microweber CMS 1.2.7 via the Login form, which could let a malicious user execute Javascript by Inserting code in the request form.

Affected packages (1)

Packagist/microweber/microweberfrom 0, < 1.2.8

References (3)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2021-33988
PATCHhttps://github.com/microweber/microweber
WEBhttps://github.com/nck0099/osTicket/issues/2