1459 matches found
Cross-site Scripting (XSS)
microweber/microweber is vulnerable to cross-site scripting. An attacker is able to input malicious HTML tags in certain user input fields which will be executed on the client browser...
Unrestricted file upload leads to stored cross-site scripting in Microweber
Microweber prior to version 1.2.12 allows unrestricted file upload, which could lead to stored cross-site scripting...
GHSA-HF4Q-52X6-4P57 Unrestricted file upload leads to stored cross-site scripting in Microweber
Microweber prior to version 1.2.12 allows unrestricted file upload, which could lead to stored cross-site scripting...
Static Code Injection in Microweber
Microweber is a new generation CMS with drag and drop. Prior to version 1.3, Microweber is vulnerable to static code injection...
GHSA-X28W-HVWC-MP75 Static Code Injection in Microweber
Microweber is a new generation CMS with drag and drop. Prior to version 1.3, Microweber is vulnerable to static code injection...
Microweber 代码问题漏洞
Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. A file upload vulnerability exists in versions of Microweber prior to 1.2.11. The vulnerability stems from the lack of val...
Microweber 跨站脚本漏洞
Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in Microweber 1.2.11 and earlier versions, which stems from a lack of filterin...
Microweber 代码问题漏洞
Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A remote code execution vulnerability exists in versions of microweber prior to 1.2.12, which...
Microweber Cross-Site Scripting Vulnerability (CNVD-2022-18522)
Microweber is a drag-and-drop website builder and CMS based on the PHP Laravel framework.Microweber suffers from a cross-site scripting vulnerability that could be exploited by attackers to steal user information and phishing...
Microweber cross-site scripting vulnerability (CNVD-2022-20098)
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber before 1.3, which stems from t...
Microweber 输入验证错误漏洞
Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. An integer overflow vulnerability exists in versions of Microweber prior to 1.3. The vulnerability stems from the fact tha...
CVE-2022-0906
Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12...
CVE-2022-0906
Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12...
CVE-2022-0906
CVE-2022-0906 concerns Microweber (GitHub microweber/microweber). The connected sources indicate an unrestricted file upload that can lead to a stored cross-site scripting (XSS) vulnerability in versions prior to 1.1.12. The issue is reported across multiple feeds (NVD, Red Hat, OSV, CNVD, CVE li...
CVE-2022-0906 Unrestricted file upload leads to stored XSS in microweber/microweber
Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12...
CVE-2022-0906 Unrestricted file upload leads to stored XSS in microweber/microweber
Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12...
CVE-2022-0895
Static Code Injection in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0895
Static Code Injection in GitHub repository microweber/microweber prior to 1.3...