CVE-2023-3142

MediumCVSS 5.4

Published: 07/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

26th percentile - higher than 26% of all known CVEs

Summary

A Cross-site Scripting (XSS) vulnerability was identified in the GitHub repository microweber/microweber prior to version 2.0. It allows attackers to inject malicious code into the application.

Risk Assessment

Exploitation of this vulnerability may lead to user data theft and session hijacking. Organizations using this version of the software are at risk of XSS attacks.

Recommendation

It is recommended to upgrade to version 2.0 or later to eliminate this vulnerability. Additionally, conducting a security audit of the application is advisable.

Original NVD description (English source)

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0.