CVE-2022-3242 HTML code Injection in template search keyword in microweber/microweber

Code Injection in GitHub repository microweber/microweber prior to 1.3.2...

CVE-2022-3242

Code Injection in GitHub repository microweber/microweber prior to 1.3.2...

CVE-2022-3242 HTML code Injection in template search keyword in microweber/microweber

Code Injection in GitHub repository microweber/microweber prior to 1.3.2...

Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber versions prior to 1.3.2. An attacker can...

CVE-2022-3242: Improper Control of Generation of Code

Code Injection in GitHub repository microweber/microweber prior to 1.3.2...

Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber, which stems from an HTML...

HTML Injection vulnerability in create tag functionality

Vulnerability Details In the Microweber CMS, While doing a live edit on to the application, we have the option to create a new global tag in the application. While creating a global tag, the "Tag Name" input field doesn't properly get sanitized and it's vulnerable to HTML Injection vulnerability...

Microweber's title parameter in the body of POST request vulnerable to stored XSS

In Microweber prior to v1.3.1, the title parameter in the body of POST request when creating/editing a category is vulnerable to stored cross-site scripting...

GHSA-CF6R-Q678-F2P7 Microweber's title parameter in the body of POST request vulnerable to stored XSS

In Microweber prior to v1.3.1, the title parameter in the body of POST request when creating/editing a category is vulnerable to stored cross-site scripting...

Cross Site Scripting (XSS)

Microweber is vulnerable to stored Cross Site Scripting. The vulnerability is due to improper sanitization in the product category title field. An authenticated attacker can add or modify a category, adding an Iframe script tag to the title that will run arbitrary Javascript whenever a user visit...

CVE-2022-2777

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.1...

CVE-2022-2777

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.1...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.1...

CVE-2022-2777 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.1...

CVE-2022-2777 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.1...

CVE-2022-2777

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.1...

CVE-2022-2777

CVE-2022-2777 is a stored XSS in Microweber (microweber/microweber) prior to v1.3.1. The vulnerability affects the title parameter in the body of POST requests when creating/editing a category, allowing injection that is stored and rendered to other users. Multiple sources (NVD, OSV, CVE lists, a...

CVE-2022-2777: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.1...

Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 1.3.1. An...

PT-2022-18575 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.3.1 Description: The issue is related to Cross-site Scripting XSS - Stored. In the GitHub repository microweber/microweber, the title parameter in the body of a POST request when creating or editing a...