Lucene search
+L

CVE-2024-33298

🗓️ 10 Jan 2025 00:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 88 Views🌐 WEB

Cross Site Scripting vulnerability in Microweber v.2.0.9 allows remote code execution via backup function.

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
zdt
zdt
Microweber 2.0.9 Cross Site Scripting Vulnerability
15 Jan 202500:00
–zdt
githubexploit
GithubExploit
Exploit for Cross-site Scripting in Microweber
10 Jan 202516:08
–githubexploit
circl
Circl
CVE-2024-33298
10 Jan 202519:34
–circl
cnnvd
CNNVD
Microweber 安全漏洞
10 Jan 202500:00
–cnnvd
cvelist
Cvelist
CVE-2024-33298
10 Jan 202500:00
–cvelist
github
Github Security Blog
Microweber Cross-site Scripting vulnerability
10 Jan 202521:31
–github
kitploit
Kitploit
CVE-2024-33298
15 Oct 202617:13
–kitploit
mend
Mend
CVE-2024-33298
10 Jan 202500:00
–mend
nvd
NVD
CVE-2024-33298
10 Jan 202520:15
–nvd
osv-ghsa
osv-ghsa
GHSA-W5G5-4JJ3-8F6V Microweber Cross-site Scripting vulnerability
10 Jan 202521:31
–osv-ghsa
Rows per page
NVD
Node
ParameterPositionPathDescriptionCWE
typequery param/admin/module/view?type=admin__backupStored Cross Site Scripting vulnerability in Microweber <= 2.0.9 via the create new backup function at /admin/module/view?type=admin__backup.CWE-79
typequery param/admin/module/view?type=filesStored XSS triggered when interacting with backups/files via the /admin/module/view?type=files endpoint.CWE-79
groupquery param/admin/settings?group=filesStored XSS triggered by file-related settings via /admin/settings?group=files.CWE-79
List namerequest body/admin/modules/newsletter/listsStored XSS via the List name field when adding a new newsletter list (Add new list) in Microweber <= 2.0.9.CWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 07:31Current
7.2High risk
Vulners AI Score7.2
CVSS 3.16.1
EPSS0.00861
SSVC
88