.. / CVE-2022-0954

Exploit for Microweber <1.2.11 - Stored Cross-Site Scripting (CVE-2022-0954)

Description:

Microweber before 1.2.1 contains multiple stored cross-site scripting vulnerabilities in Shop’s Other Settings, Autorespond E-mail Settings, and Payment Methods.

Nuclei Template

View the template here CVE-2022-0954.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-0954.yaml
Copy

References:

https://github.com/microweber/microweber/commit/955471c27e671c49e4b012e3b120b004082ac3f7
https://nvd.nist.gov/vuln/detail/CVE-2022-0954
https://github.com/advisories/GHSA-8c76-mxv5-w4g8
https://github.com/ARPSyndicate/kenzer-templates
https://huntr.dev/bounties/b99517c0-37fc-4efa-ab1a-3591da7f4d26/