{"cvss":6.3,"datePublished":"2023-12-20T00:00:00Z","dateUpdated":"2023-12-20T00:00:00Z","description":"Reflected XSS on demo.microweber.org/demo/module/ in GitHub repository microweber/microweber prior to 1.2.15. Execute Arbitrary JavaScript as the attacked user. It's the only payload I found working, you might need to press \"tab\" but there is probably a paylaod that runs without user interaction.","dueDate":"","id":"CVE-2022-1439","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"microweber","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"MEDIUM","source":"vulncheck_kev","title":"microweber microweber Improper Neutralization of Input During Web Page Generation","vendor":"microweber"}