CVE-2022-0378 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0379 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0379 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0379

CVE-2022-0379 affects microweber/microweber prior to version 1.2.11 and is a stored Cross-site Scripting (XSS) vulnerability. Public descriptions consistently identify XSS in microweber’s checkout/routing context, enabling injection of arbitrary JavaScript. Impact is listed as high in some source...

Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in versions of microweber prior to 1.2.11,...

Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 1.2.11, whic...

microweber cross-site scripting vulnerability

Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in microweber, which stems from a lack of data...

microweber access control error vulnerability

Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, and more. microweber is vulnerable to an access control error, which stems from a network system o...

microweber information disclosure vulnerability (CNVD-2022-08215)

Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. microweber has an information disclosure vulnerability, which stems from errors in the...

Cross-site Scripting (XSS) - Stored in microweber/microweber

Description There is a persistent XSS Vulnerability exsists in the checkout page where we can able to execute any javascription in the last name field...

Cross-site Scripting in microweber

Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...

GHSA-M8RP-Q82R-C5MF Cross-site Scripting in microweber

Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...

GHSA-7WV8-G97R-432H Exposure of Sensitive Information to an Unauthorized Actor in microweber

Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11...

GHSA-VCGF-VMPC-PH79 Microweber Incorrect Permission Assignment for Critical Resource vulnerability

In Microweber prior to 1.2.11, a non-admin user is able to access other users' sensitive information...

Microweber Incorrect Permission Assignment for Critical Resource vulnerability

In Microweber prior to 1.2.11, a non-admin user is able to access other users' sensitive information...

Code Injection in microweber

Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11...

GHSA-P5HJ-XXFR-PWC3 Code Injection in microweber

Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11...

HTML Injection

microweber/microweber is vulnerable to HTML injection. An attacker can inject and execute malicious html content in the webpage as the library does not properly clean the html tags before being rendered on the webpage...

Cross-site Scripting (XSS)

microweber/microweber is vulnerable to cross-site scripting. The vulnerability existsdue to the lack of sanitization in 'notifformentry.php', allowing an attacker to inject script into web pages and its leads to XSS attack...

Information Disclosure

microweber/microweber is vulnerable to information disclosure. The vulnerability exists due to the lack of sanitization in apiuser.php file, allowing an attacker to gain access to unauthorized sensitive information...