Cross-site Scripting (XSS)

Overview microweber/microweber is a new generation CMS with drag and drop. Affected versions of this package are vulnerable to Cross-site Scripting XSS through the manipulation of the group argument in the Settings Handler due to improper sanitization before being rendered on the page. Details...

PT-2025-10979

Name of the Vulnerable Software and Affected Versions: Microweber version 2.0.19 Description: A problem was found in the Settings Handler component, specifically in the file userfiles/modules/settings/group/website group/index.php. The issue allows for cross-site scripting by manipulating the gro...

CVE-2002-0290: Undefined Security Weakness

Buffer overflow in Netwin WebNews CGI program 1.1, Webnews.exe, allows remote attackers to execute arbitrary code via a long group argument...