GHSA-232p-59mg-f98p
GitHub Security Advisory
Microweber Cross-site Scripting can result in redirection to a malicious site
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
Microweber versions 1.3.1 and prior are vulnerable to HTML injection that an attacker can use to redirect someone to a malicious site. A patch is available at commit 68f0721571653db865a5fa01c7986642c82e919c and expected to be part of version 1.3.2.
Affected Packages
Packagist
microweber/microweber
Affected versions:
0
(fixed in 1.3.2)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: July 5, 2025 6:26 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.