CVE-2022-3245

HTML injection attack is closely related to Cross-site Scripting (XSS). HTML injection uses HTML to deface the page. XSS, as the name implies, injects JavaScript into the page. Both attacks exploit insufficient validation of user input.

Score

CVSS 3.1 6.1 Medium

Status

Modified - security@huntr.dev

Published

2022-09-20

Last modified

2025-05-27

Weaknesses

CWE-79, CWE-94

Affected products

• Microweber (Microweber)
• Microwebermicroweber (Microweber)

References

• https://github.com/microweber/microweber/commit/f20abf30a1d9c1426c5fb757ac63998dc5b92bfc
• https://huntr.dev/bounties/747c2924-95ca-4311-9e69-58ee0fb440a0