Skip to content
Sign in
6.1 Medium

CVE-2022-0698 Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file'…

Description

Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter.

Affected products and versions

Product Affected versions Fixed in
Microweber 1.3.1 No fix stated

Other CVEs of Microweber

The 3 CVEs of Microweber →
CVE-2026-12198 A weakness has been identified in Microweber up to 2.0.20 6.9 Medium CVE-2025-2214 A vulnerability was found in Microweber 2.0.19 5.1 Medium
Track this CVE