CVE-2025-51504

Microweber CMS 2.0 is affected by a Cross-Site Scripting (XSS) vulnerability in the /projects/profile and homepage endpoints, exploitable via the last name field. The issue is characterized in multiple sources as XSS with no publicly fixed version (per Snyk remediation note) and is listed under C...

CVE-2021-33988

Cross Site Scripting XSS. vulnerability exists in Microweber CMS 1.2.7 via the Login form, which could let a malicious user execute Javascript by Inserting code in the request form...