Lucene search
+L

5 matches found

Veracode
Veracode
•added 2025/08/20 7:12 a.m.•15 views

Cross-site Scripting (XSS)

microweber/microweber is vulnerable to cross-site scripting XSS. The vulnerability is due to improper input validation due to the last name field in the /projects/profile homepage endpoint allowing injection of malicious scripts...

7.6CVSS6.7AI score0.00522EPSS
SaveExploits1References5Affected Software1
Mend
Mend
•added 2025/08/01 12:00 a.m.•3 views

CVE-2025-51504

Microweber CMS 2.0 is vulnerable to Cross Site Scripting XSSin the /projects/profile, homepage endpoint via the last name field...

7.6CVSS0.00522EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/08/01 12:00 a.m.•13 views

Microweber CMS 安全漏洞

Microweber CMS is a drag-and-drop website builder from Microweber Open Source. A security vulnerability exists in Microweber CMS version 2.0, which stems from cross-site scripting in the last name field in the /projects/profile and homepage endpoints...

7.6CVSS6AI score0.00522EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/01 12:00 a.m.•1 views

CVE-2025-51504: Improper Neutralization of Input During Web Page Generation

Microweber CMS 2.0 is vulnerable to Cross Site Scripting XSSin the /projects/profile, homepage endpoint via the last name field...

7.6CVSS5.8AI score0.00522EPSS
SaveExploits1References1
OSV
OSV
•added 2025/08/01 12:00 a.m.•14 views

CVE-2025-51504

Microweber CMS 2.0 is vulnerable to Cross Site Scripting XSSin the /projects/profile, homepage endpoint via the last name field...

7.6CVSS6.6AI score
SaveExploits0References5
Rows per page
Query Builder