{"id":"GHSA-w7x8-cq7r-g5g9","aliases":["CVE-2021-33988"],"title":"Cross Site Scripting in Microweber","description":"Cross Site Scripting (XSS). vulnerability exists in Microweber CMS 1.2.7 via the Login form, which could let a malicious user execute Javascript by Inserting code in the request form.","severity":"medium","score":null,"published":"2021-10-25T19:43:39.000Z","modified":"2024-12-02T05:47:06.511Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"microweber/microweber","ranges":[{"events":[{"introduced":"0"},{"fixed":"1.2.8"}],"type":"ECOSYSTEM"}],"versions":["0.9.346","0.93","0.931","0.934","0.951","1.0.3","1.0.4","1.0.5","1.0.6","1.0.7","1.1","v1.2.3","v1.2.4","v1.2.5","v1.2.6","v1.2.7"],"fixed":["1.2.8"]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2021-33988","https://github.com/nck0099/osTicket/issues/2","https://github.com/microweber/microweber"],"sources":[{"name":"OSV","id":"GHSA-w7x8-cq7r-g5g9","modified":"2024-12-02T05:47:06.511384Z","url":"https://osv.dev/vulnerability/GHSA-w7x8-cq7r-g5g9"}],"assessments":[]}