CVE-2022-0282
Assigner: @huntrdev
Published: 2022-01-20T11:15:11
State: PUBLISHED
affected: defaultStatus: unaffected
product: microweber/microweber
vendor: microweber
versions: lessThan: 1.2.11
status: affected
version: unspecified
versionType: custom
descriptions: supportingMedia: base64: no
type: text/html
value: <p>Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11.</p>
value: Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11.


metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
type: CWE
source: advisory: 8815b642-bd9b-4737-951b-bde7319faedd
discovery: EXTERNAL
title: Cross-site Scripting in microweber/microweber
x_generator: engine: Vulnogram 0.1.0-dev