Vulnerabilities

TI-2022-00214 CVE-2022-0282 · GHSA-p5hj-xxfr-pwc3

Cross-site Scripting in microweber/microweber

LOW 36

Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01376 Published 2022-01-20 Fixed in 1.2.11 CWE-79

TI-2022-00213 CVE-2022-0281 · GHSA-7wv8-g97r-432h

MEDIUM 46

Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.10478 Published 2022-01-20 Fixed in 1.2.11 CWE-200

TI-2022-00210 CVE-2022-0278 · GHSA-m8rp-q82r-c5mf

LOW 26

Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00728 Published 2022-01-20 Fixed in 1.2.11 CWE-79

TI-2022-00209 CVE-2022-0277 · GHSA-vcgf-vmpc-ph79

LOW 31

Incorrect Permission Assignment for Critical Resource in Packagist microweber/microweber prior to 1.2.11.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01121 Published 2022-01-20 Fixed in 1.2.11 CWE-732