CVE-2022-0282

Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11.

• CWE-79
• CWE-79

• https://github.com/microweber/microweber/commit/51b5a4e3ef01e587797c0109159a8ad9d2bac77aPatch, Third Party Advisory
• https://huntr.dev/bounties/8815b642-bd9b-4737-951b-bde7319faeddExploit, Third Party Advisory
• https://github.com/microweber/microweber/commit/51b5a4e3ef01e587797c0109159a8ad9d2bac77aPatch, Third Party Advisory
• https://huntr.dev/bounties/8815b642-bd9b-4737-951b-bde7319faeddExploit, Third Party Advisory

Published

Jan 20, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0274Cross-site Scripting (XSS) - Stored in NuGet OrchardCore.App…5.4
• CVE-2022-0277Incorrect Permission Assignment for Critical Resource in Pac…6.5
• CVE-2022-0278Cross-site Scripting (XSS) - Stored in Packagist microweber/…5.4
• CVE-2022-0279The AnyComment WordPress plugin before 0.2.18 is affected by…3.1
• CVE-2022-0280A race condition vulnerability exists in the QuickClean feat…7
• CVE-2022-0281Exposure of Sensitive Information to an Unauthorized Actor i…7.5
• CVE-2022-0283An issue has been discovered affecting GitLab versions prior…6.1
• CVE-2022-0284A heap-based-buffer-over-read flaw was found in ImageMagick'…7.1
• CVE-2022-0285Cross-site Scripting (XSS) - Stored in Packagist pimcore/pim…5.4
• CVE-2022-0286A flaw was found in the Linux kernel. A null pointer derefer…5.5
• CVE-2022-0287The myCred WordPress plugin before 2.4.4.1 does not have any…4.3
• CVE-2022-0288The Ad Inserter WordPress plugin before 2.7.10, Ad Inserter …6.1