4 matches found
CVE-2025-51501
Reflected Cross-Site Scripting XSS in the id parameter of the liveedit.modulesettings API endpoint in Microweber CMS2.0 allows execution of arbitrary JavaScript...
6.1CVSS0.00801EPSS
SaveExploits1References3
CVE-2025-51501
Reflected Cross-Site Scripting XSS in the id parameter of the liveedit.modulesettings API endpoint in Microweber CMS2.0 allows execution of arbitrary JavaScript...
6AI score0.00801EPSS
SaveExploits1References3
CVE-2025-51501
Microweber CMS2.0 is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw in the id parameter of the live_edit.module_settings API endpoint. This vulnerability allows an attacker to execute arbitrary JavaScript in a victim's browser by tricking them into visiting a crafted URL. Practical con...
6.1CVSS6AI score0.00801EPSS
SaveExploits1References3Affected Software1
20