[microweber/microweber] Microweber vulnerable to Reflected Cross-site Scripting

Microweber versions 1.3.1 and prior are vulnerable to Reflected Cross-site Scripting (XSS). A patch is available on the 1.4, dev, and laravel-sail branches.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-4617
• https://github.com/microweber/microweber/commit/df8add930ecfa7f5b18c67c3f748c137fe890906
• https://huntr.dev/bounties/1fb2ce08-7016-45fa-b402-ec08d700e4df
• https://github.com/advisories/GHSA-3mmh-vq9w-4c3g