CVE

CVE-2022-0954

5.4

CVSSmedium

Exploitable remotely over the internet · requires high privileges · user interaction needed.

Description

Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in GitHub repository microweber/microweber prior to 1.2.11.

Attack Vector

Network

Privileges Req.

High

User Interaction

Required

microweber/microweber

Updated Sep 22, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~10 seconds

CVE-2022-0954 Scanner

Detects 'Cross-Site Scripting (XSS)' vulnerability in microweber/microweber affects v. prior to 1.2.11.

Used 2.9k times · 5.9k assets checked · domain, ipv4, subdomain

Scanner page →Run scanner

CVE history: microweber/microweber

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →