4 matches found
CVE-2025-51502
Reflected Cross-Site Scripting XSS in Microweber CMS 2.0 via the layout parameter on the /admin/page/create page allows arbitrary JavaScript execution in the context of authenticated admin users...
CVE-2025-51502
Reflected Cross-Site Scripting XSS in Microweber CMS 2.0 via the layout parameter on the /admin/page/create page allows arbitrary JavaScript execution in the context of authenticated admin users...
CVE-2025-51502
Microweber CMS 2.0 is vulnerable to Reflected Cross-Site Scripting (XSS) due to the improper validation and sanitization of the layout parameter on the /admin/page/create page. This flaw allows an attacker to execute arbitrary JavaScript in the context of authenticated admin users by tricking the...
CVE-2025-51502
Reflected Cross-Site Scripting XSS in Microweber CMS 2.0 via the layout parameter on the /admin/page/create page allows arbitrary JavaScript execution in the context of authenticated admin users...