101 matches found
CVE-2022-0379
Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...
CVE-2023-6832 Business Logic Errors in microweber/microweber
Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...
CVE-2023-6832 Business Logic Errors in microweber/microweber
Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...
CVE-2023-6599: Missing Standardized Error Handling Mechanism
Missing Standardized Error Handling Mechanism in GitHub repository microweber/microweber prior to 2.0...
CVE-2023-6566: Undefined Security Weakness
Business Logic Errors in GitHub repository microweber/microweber prior to 2.0...
CVE-2023-5976
The CVE-2023-5976 entry concerns Microweber (microweber/microweber) prior to version 2.0.0 with an improper access control flaw. Multiple connected sources identify the root cause as insufficient restrictions that allow unauthorized actions (e.g., commenting on unpublished blog content). Context ...
CVE-2023-5976: Improper Access Control
Improper Access Control in GitHub repository microweber/microweber prior to 2.0...
CVE-2023-5244 Cross-site Scripting (XSS) - Reflected in microweber/microweber
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 2.0...
CVE-2023-2239: Exposure of Private Personal Information to an Unauthorized Actor
Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.3.4...
CVE-2023-0608 Cross-site Scripting (XSS) - DOM in microweber/microweber
Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...
CVE-2022-2470 Cross-site Scripting (XSS) - Reflected in microweber/microweber
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...
CVE-2022-2470: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...
CVE-2022-2353: Cross-Site Request Forgery (CSRF)
Prior to microweber/microweber v1.2.20, due to improper neutralization of input, an attacker can steal tokens to perform cross-site request forgery, fetch contents from same-site and redirect a user...
CVE-2022-2353 Cross-Site Request Forgery (CSRF) in microweber/microweber
Prior to microweber/microweber v1.2.20, due to improper neutralization of input, an attacker can steal tokens to perform cross-site request forgery, fetch contents from same-site and redirect a user...
CVE-2022-2280 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
CVE-2022-2174 Cross-site Scripting (XSS) - Reflected in microweber/microweber
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.18...
CVE-2022-2130 Cross-site Scripting (XSS) - Reflected in microweber/microweber
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.17...
CVE-2022-2130: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.17...
CVE-2022-1631 Users Account Pre-Takeover or Users Account Takeover. in microweber/microweber
Users Account Pre-Takeover or Users Account Takeover. in GitHub repository microweber/microweber prior to 1.2.15. Victim Account Take Over. Since, there is no email confirmation, an attacker can easily create an account in the application using the Victim’s Email. This allows an attacker to gain...