漏洞描述
Microweber before 1.2.1 contains multiple stored cross-site scripting vulnerabilities in Shop's Other Settings, Autorespond E-mail Settings, and Payment Methods.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
github.comhttps://github.com/advisories/GHSA-8c76-mxv5-w4g8↗huntr.devhttps://huntr.dev/bounties/b99517c0-37fc-4efa-ab1a-3591da7f4d26/↗github.comhttps://github.com/microweber/microweber/commit/955471c27e671c49e4b012e3b120b004082ac3f7↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2022-0954↗github.comhttps://github.com/ARPSyndicate/kenzer-templates↗