CVE-2022-0666: Microweber

High severity, CVSS 7.5. EPSS: 44.3% chance of exploitation in the next 30 days.

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11.

Affected products

• Microweber Microweber: before 1.2.11 (fixed in 1.2.11)

Published 2022-02-18. Last modified 2026-06-17.