GHSA-m99v-mmg2-66vfMediumCVSS 6.1

Microweber Reflected Cross-site scripting (XSS) vulnerability

Published
August 6, 2024
Last Modified
March 25, 2025

🔗 CVE IDs covered (1)

CVE-2024-40101 →

📋 Description

A Reflected Cross-site scripting (XSS) vulnerability exists in '/search' in microweber 2.0.15 and earlier allowing unauthenticated remote attackers to inject arbitrary web script or HTML via the 'keywords' parameter.

🎯 Affected products1

  • composer/microweber/microweber:< 2.0.16

🔗 References (6)