CVE-2022-0282: Cross-site Scripting in microweber/microweber
Published Jan 20, 2022
·Updated
Code Injection in Packagist microweber/microweber prior to 1.2.11.
Other sources
Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11.
— MITRE
Affected Software
2 affected componentsFixes available
composer/microweber/microweber<1.2.11
1.2.11
Microweber Microweber<=1.2.10
Remediation
Event History
Jan 20, 2022
CVE Published
via MITRE·11:15 AM
Data Sourced
via MITRE·11:15 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jan 21, 2022
Advisory Published
06:02 PM
Frequently Asked Questions
1
What is the severity of CVE-2022-0282?
CVE-2022-0282 is categorized as a critical vulnerability due to its potential for code injection and cross-site scripting.
2
How do I fix CVE-2022-0282?
To fix CVE-2022-0282, upgrade Microweber to version 1.2.11 or later.
3
What types of vulnerabilities are reported in CVE-2022-0282?
CVE-2022-0282 reports code injection and cross-site scripting vulnerabilities.
4
Which versions of Microweber are affected by CVE-2022-0282?
Versions of Microweber prior to 1.2.11 are affected by CVE-2022-0282.
5
Is CVE-2022-0282 a remote or local exploit?
CVE-2022-0282 can be exploited remotely, making it particularly dangerous.