Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2022-0928

MEDIUM
Published 2022-03-11T10:25:10
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2022-0928. We'll provide specific mitigation strategies based on your environment and risk profile.

CVSS Score

V3.0
6.8
/10
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Base Score Metrics
Exploitability: N/A Impact: N/A

EPSS Score

v2025.03.14
0.047
probability
of exploitation in the wild

There is a 4.7% chance that this vulnerability will be exploited in the wild within the next 30 days.

Updated: 2025-06-25
Exploit Probability
Percentile: 0.889
Higher than 88.9% of all CVEs

Attack Vector Metrics

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED

Impact Metrics

Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Description

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.12.

Available Exploits

Microweber < 1.2.12 - Stored Cross-Site Scripting

Microweber prior to 1.2.12 contains a stored cross-site scripting vulnerability via the Type parameter in the body of POST request, which is triggered by Add/Edit Tax.

ID: CVE-2022-0928
Author: amit-jd Medium

References:

Related News

No news articles found for this CVE.

Affected Products

microweber

microweber/microweber

Affected Versions:

unspecified

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

✓ GitHub Reviewed MODERATE

Cross-site Scripting in microweber

GHSA-jjp3-m93h-5jm4

Advisory Details

Microweber drag and drop website builder and CMS with e-commerce. Cross-site Scripting (XSS) discovered in microweber prior to 1.2.12. There is currently no known workaround, users are recommended to update to version 1.2.12.

Affected Packages

Packagist microweber/microweber
ECOSYSTEM: ≥0 <1.2.12

CVSS Scoring

CVSS Score

5.0

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2022-0928
WEB https://github.com/microweber/microweber/commit/fc9137c031f7edec5f50d73b300919fb519c924a
PACKAGE https://github.com/microweber/microweber
WEB https://huntr.dev/bounties/085aafdd-ba50-44c7-9650-fa573da29bcd

Advisory provided by GitHub Security Advisory Database. Published: March 12, 2022, Modified: March 24, 2022

References

https://huntr.dev/bounties/085aafdd-ba50-44c7-9650-fa573da29bcd
https://github.com/microweber/microweber/commit/fc9137c031f7edec5f50d73b300919fb519c924a
Published: 2022-03-11T10:25:10
Last Modified: 2024-08-02T23:47:42.844Z
Copied to clipboard!