Cross-site Scripting (XSS) - Stored in microweber/microweber

Description There is a persistent XSS Vulnerability exsists in the checkout page where we can able to execute any javascription in the last name field...

GHSA-M8RP-Q82R-C5MF Cross-site Scripting in microweber

Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...

Cross-site Scripting in microweber

Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...

GHSA-7WV8-G97R-432H Exposure of Sensitive Information to an Unauthorized Actor in microweber

Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11...

GHSA-VCGF-VMPC-PH79 Microweber Incorrect Permission Assignment for Critical Resource vulnerability

In Microweber prior to 1.2.11, a non-admin user is able to access other users' sensitive information...

Microweber Incorrect Permission Assignment for Critical Resource vulnerability

In Microweber prior to 1.2.11, a non-admin user is able to access other users' sensitive information...

GHSA-P5HJ-XXFR-PWC3 Code Injection in microweber

Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11...

Code Injection in microweber

Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11...

HTML Injection

microweber/microweber is vulnerable to HTML injection. An attacker can inject and execute malicious html content in the webpage as the library does not properly clean the html tags before being rendered on the webpage...

Cross-site Scripting (XSS)

microweber/microweber is vulnerable to cross-site scripting. The vulnerability existsdue to the lack of sanitization in 'notifformentry.php', allowing an attacker to inject script into web pages and its leads to XSS attack...

Information Disclosure

microweber/microweber is vulnerable to information disclosure. The vulnerability exists due to the lack of sanitization in apiuser.php file, allowing an attacker to gain access to unauthorized sensitive information...

Access Control Bypass

microweber/microweber is vulnerable to access control bypass. The vulnerability that exists in user permissions in apiuser.php file does not perform sufficient user permissions, allowing unauthorized users to access sensitive information...

CVE-2022-0282

Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0282

Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11...

Cross site scripting

Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0282 Cross-site Scripting in microweber/microweber

Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0282

CVE-2022-0282 affects microweber/microweber prior to version 1.2.11, with a Cross-site Scripting vulnerability described as arising from inadequate filtering of externally entered data during code-segment construction. Impact as described is exploitation of XSS; no exploit details are provided in...

CVE-2022-0282 Cross-site Scripting in microweber/microweber

Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0281

Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0281

Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11...