CVE-2022-4647: Cross-site Scripting (XSS) - Stored in microweber/microweber
Published Dec 22, 2022
·Updated
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.2.
Affected Software
1 affected component
Microweber Microweber<=1.3.1
Remediation
Event History
Dec 22, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2022-4647?
CVE-2022-4647 is a vulnerability that allows an attacker to inject malicious scripts into a website and execute them in the browser of other users.
2
How does CVE-2022-4647 affect Microweber?
CVE-2022-4647 affects Microweber versions prior to 1.3.2, allowing for stored cross-site scripting (XSS) attacks.
3
What is the severity of CVE-2022-4647?
CVE-2022-4647 has a medium severity rating with a CVSS score of 6.1.
4
How can I fix CVE-2022-4647?
To fix CVE-2022-4647, upgrade your Microweber installation to version 1.3.2 or later.
5
Where can I find more information about CVE-2022-4647?
You can find more information about CVE-2022-4647 in the official GitHub repository for Microweber and on the Huntr.dev website.