Loading HuntDB...

GHSA-prff-6j8q-vrv7

GitHub Security Advisory

Cross-site Scripting in microweber

✓ GitHub Reviewed MODERATE Has CVE

Advisory Details

There is a persistent XSS Vulnerability exsists in the checkout page where we can able to execute any javascription in the last name field

Affected Packages

Packagist microweber/microweber
Affected versions: 0 (fixed in 1.2.11)

Related CVEs

Key Information

GHSA ID
GHSA-prff-6j8q-vrv7
Published
January 28, 2022 10:15 PM
Last Modified
February 3, 2022 9:01 PM
CVSS Score
5.0 /10
Primary Ecosystem
Packagist
Primary Package
microweber/microweber
GitHub Reviewed
✓ Yes

Dataset

Last updated: July 3, 2025 6:26 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.