GHSA-vm37-j55j-8655

GitHub Security Advisory

OS Command Injection in Microweber

✓ GitHub Reviewed HIGH Has CVE

Microweber is a content management system with drag and drop. Prior to version 1.2.11, Microweber is vulnerable to OS Command Injection.

Packagist microweber/microweber

Affected versions: 0 (fixed in 1.2.11)

CVE-2022-0557

GHSA ID

GHSA-vm37-j55j-8655

Published

February 12, 2022 12:00 AM

Last Modified

March 28, 2022 3:23 PM

CVSS Score

7.5 /10

Primary Ecosystem

Packagist

Primary Package

microweber/microweber

GitHub Reviewed

✓ Yes

Last updated: July 3, 2025 6:26 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.