description: Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter.
problem types: DOM-Based cross-site scripting (XSS)
affected:
{
vendor: n/a
product: Microweber
versions:
version: 1.3.1, status: affected
}