CVE-2022-1555: DOM XSS in microweber ver 1.2.15 in microweber/microweber
Published May 4, 2022
·Updated
DOM XSS in microweber ver 1.2.15 in GitHub repository microweber/microweber prior to 1.2.16. inject arbitrary js code, deface website, steal cookie...
Affected Software
1 affected component
Microweber Microweber<1.2.16
Remediation
Event History
May 4, 2022
CVE Published
via MITRE·08:30 AM
Data Sourced
via MITRE·08:30 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-1555?
The severity of CVE-2022-1555 is high with a CVSS score of 6.1.
2
How does CVE-2022-1555 impact microweber ver 1.2.15?
CVE-2022-1555 allows an attacker to inject arbitrary JavaScript code, deface websites, and steal cookies in microweber ver 1.2.15.
3
How can I fix CVE-2022-1555?
To fix CVE-2022-1555, it is recommended to update microweber to version 1.2.16 or later.
4
Where can I find more information about CVE-2022-1555?
You can find more information about CVE-2022-1555 in the GitHub commit and the huntr.dev bounty page.
5
What is the CVE ID of the vulnerability in microweber ver 1.2.15?
The CVE ID of this vulnerability in microweber ver 1.2.15 is CVE-2022-1555.