CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It affects Java, GitHub. Public exploit code or proof-of-concept references have been detected in its references.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
GitHub PoC Links
Note: these links are listed for security research and verification purposes only.
CVE
CVE-2022-1439
Severity
MEDIUM
CVSS
6.1
EPSS
3.27%
Java GitHub
Original NVD Description
Reflected XSS on demo.microweber.org/demo/module/ in GitHub repository microweber/microweber prior to 1.2.15. Execute Arbitrary JavaScript as the attacked user. It's the only payload I found working, you might need to press "tab" but there is probably a paylaod that runs without user interaction.
Related CVEs
Other vulnerabilities affecting the same vendor(s)