1388 matches found
CVE-2022-0558
Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0558
Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...
Cross site scripting
Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0558 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0558
CVE-2022-0558 affects microweber/microweber before 1.2.11. The issue is a stored cross-site scripting (XSS) vulnerability caused by lack of input sanitization, with exploitation occurring via stored data (e.g., tagging). Impact is elevated to client-side script execution within affected webpages....
Packagist microweber 跨站脚本漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Packagist microweber, which stems from a...
Information Disclosure
microweber is vulnerable to information disclosure. The vulnerability exists due to the lack of sanitization of the error message via the json.data...
Cross-Site Scripting (XSS)
microweber is vulnerable to cross site scripting. The vulnerability exists due to a lack of santization via the URL schemes, allowing an attacker to execute arbitrary JavaScript in a victim's browser...
Cross-Site Request Forgery (CSRF)
microweber/microweber is vulnerable to cross-site request forgeryCSRF. The vulnerability exists due to a lack of input sanitization in the api.php file allowing the attacker to manipulate authorized users to initiate unwanted actions...
GHSA-7X2H-3V2V-24P9 Cross-Site Request Forgery in microweber
microweber version 1.2.10 and prior is vulnerable to cross-site request forgery...
GHSA-JJVM-3MFQ-7GC7 Cross-site Scripting in microweber
microweber version 1.2.10 and prior is vulnerable to cross-site scripting...
GHSA-XXQ4-3742-3H28 Generation of Error Message Containing Sensitive Information in microweber
microweber version 1.2.10 and prior may generate an error message containing sensitive information...
Cross-Site Request Forgery in microweber
microweber version 1.2.10 and prior is vulnerable to cross-site request forgery...
Generation of Error Message Containing Sensitive Information in microweber
microweber version 1.2.10 and prior may generate an error message containing sensitive information...
Cross-site Scripting in microweber
microweber version 1.2.10 and prior is vulnerable to cross-site scripting...
CVE-2022-0505
Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0506
Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0505
Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...