CVE-2022-33012
Microweber v1.2.15 was discovered to allow attackers to perform an account takeover via a host header injection attack.
Date published : 2022-11-22
https://blog.jitendrapatro.me/cve-2022-33012-account-takeover-through-password-reset-poisoning/