CVE-2025-51504

Microweber CMS 2.0 is vulnerable to Cross Site Scripting XSSin the /projects/profile, homepage endpoint via the last name field...

CVE-2025-51504

Microweber CMS 2.0 is vulnerable to Cross-Site Scripting (XSS) in the /projects/profile and homepage endpoints. The root cause is improper input validation of the last name field , which allows an attacker to inject and execute arbitrary JavaScript code in a user's browser. Practical consequences...