CVE-2024-41380

Microweber Cross Site Scripting (XSS) vulnerability

Title source: GitHub Advisory
STIX 2.1 vulnerability

Description

microweber 2.0.16 was discovered to contain a Cross Site Scripting (XSS) vulnerability via userfiles\modules\tags\add_tagging_tagged.php.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 7, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

microweber

Browse microweber / microweber

Default status: unknown

CVE List2.0.16affected

microweber/microweber

Browse Packagist / microweber/microweber
GitHub AdvisoryThrough 2.0.16affected

References

3