CVE-2022-3245: Microweber

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

HTML injection attack is closely related to Cross-site Scripting (XSS). HTML injection uses HTML to deface the page. XSS, as the name implies, injects JavaScript into the page. Both attacks exploit insufficient validation of user input.

Affected products

• Microweber Microweber: before 1.3.2 (fixed in 1.3.2)

Published 2022-09-20. Last modified 2026-06-17.