Description
Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting (XSS). For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted in versions 1.2.9 and 1.2.12, but it is incomplete.
Published: 2023-02-20
Score: 6.1 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-0744 Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting (XSS). For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted in versions 1.2.9 and 1.2.12, but it is incomplete.
Github GHSA Github GHSA GHSA-mv37-xrmc-hf64 Microweber Cross-site Scripting vulnerability
History

Mon, 10 Mar 2025 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Microweber Microweber
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2025-03-10T21:08:39.870Z

Reserved: 2021-05-12T00:00:00.000Z

Link: CVE-2021-32856

cve-icon Vulnrichment

Updated: 2024-08-03T23:33:55.966Z

cve-icon NVD

Status : Modified

Published: 2023-02-21T15:15:11.540

Modified: 2024-11-21T06:07:53.657

Link: CVE-2021-32856

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses