CVE-2025-51504

Microweber CMS 2.0 is vulnerable to Cross-Site Scripting (XSS) in the /projects/profile and homepage endpoints. The root cause is improper input validation of the last name field , which allows an attacker to inject and execute arbitrary JavaScript code in a user's browser. Practical consequences...

CVE-2021-33988

Cross Site Scripting XSS. vulnerability exists in Microweber CMS 1.2.7 via the Login form, which could let a malicious user execute Javascript by Inserting code in the request form...