CVE-2018-19917

Description

Microweber 1.0.8 has reflected cross-site scripting (XSS) vulnerabilities.

How to fix CVE-2018-19917

No fixed version has been published yet. Mitigate by removing the affected package or applying upstream guidance from the references below.

• Packagist/microweber/microweber—no fix listed

Is CVE-2018-19917 being exploited?

Low — EPSS is 0.5%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, <= 1.0.8

CVSS scores

References (6)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2018-19917
• PATCHgithub.com/microweber/microweber
• WEBpacketstormsecurity.com/files/151005/Microweber-1.0.8-Cross-Site-Scripting.html
• WEBseclists.org/fulldisclosure/2019/Jan/12
• WEB