Code injection

Use multiple time the one-time coupon in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0690 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0690 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0690

CVE-2022-0690 is a reflected Cross-site Scripting (XSS) vulnerability in microweber/microweber prior to version 1.2.11. The public documents consistently describe it as XSS affecting Packagist microweber/microweber; no patch version or remediation steps are provided in the supplied sources. A Hun...

CVE-2022-0689

CVE-2022-0689 affects microweber/microweber prior to 1.2.11, where the one-time coupon logic allows multiple uses. This is a business-logic error enabling coupon reuse. Connected sources (Red Hat, OSV, GHSA, CNVD, NVD, and others) corroborate the same description. The documentation does not speci...

CVE-2022-0689 Use multiple time the one-time coupon in microweber/microweber

Use multiple time the one-time coupon in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0678

Cross-site Scripting XSS - Reflected in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0678

Cross-site Scripting XSS - Reflected in Packagist microweber/microweber prior to 1.2.11...

Cross site scripting

Cross-site Scripting XSS - Reflected in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0678

CVE-2022-0678 affects Microweber/Microweber prior to version 1.2.11, with a reflected XSS via the logout flow where the redirectUrl parameter can be manipulated to inject scripts. The Nuclei template confirms the vulnerability as a Cross-Site Scripting issue in microweber/microweber before 1.2.11...

CVE-2022-0678 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in Packagist microweber/microweber prior to 1.2.11...

GHSA-HHRJ-WP42-32V3 Generation of Error Message Containing Sensitive Information in microweber

Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...

GHSA-3WWJ-WH2W-G4XP CRLF Injection in microweber

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...

CRLF Injection in microweber

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...

Microweber 跨站脚本漏洞

Microweber is an online store management system from the US Microweber community that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. Microweber has a cross-site scripting vulnerability, and no details of the vulnerability are available at this...

microweber 安全漏洞

Microweber is an online store management system from the US Microweber community that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. Microweber has a security vulnerability, and no details of the vulnerability are available at this time...

microweber 跨站脚本漏洞

Microweber is an online store management system from the US Microweber community that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. Microweber has a cross-site scripting vulnerability, and no details of the vulnerability are available at this...

CVE-2022-0666

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0666

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...

Crlf injection

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...