1390 matches found
Microweber Access Control Error Vulnerability
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. An Access Control Error vulnerability exists in Microweber versions prior to 2.0 that...
Stored Cross-Site Scripting (XSS)
microweber is vulnerable to Stored Cross-Site Scripting XSS. The vulnerability lies in the "Dashboard" module, allowing an attacker to inject a malicious script which will be executed once a user visits the affected page...
CVE-2023-5861
CVE-2023-5861 affects microweber/microweber prior to 2.0. The linked advisories describe Stored XSS in the Dashboard module, impacting versions before 2.0. Mitigation: update to version 2.0 or later (per PT-Security, CNNVD and related sources). The available documents do not provide detailed expl...
CVE-2023-5861 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 2.0...
PT-2023-32380 · Unknown · Microweber
Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 2.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which means an attacker can inject malicious scripts into a website, and these scripts will be executed by the browser of othe...
Microweber Cross-Site Scripting Vulnerability
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 2.0, which...
Cross Site Scripting
Microweber is vulnerable to Cross-site Scripting XSS .The vulnerability is due to not sanitizing user provided types and title fields during web page generation. This may lead to an attacker injecting malicious scripts that are executed by the victim's browser by sending a crafted URL that reflec...
Microweber cross-site scripting vulnerability (CNVD-2023-79685)
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 2.0, which...
Hard Coded Credentials
Microweber is vulnerable to the use of Hard Coded Credentials. The vulnerability is due to the hard coding of oauth access token values in the twitterfeedperformapirequest function in userfiles/modules/twitterfeed/functions.php which is required to access twitter API's. This may lead to sensitive...
GHSA-R657-3WQH-G2X9 Microweber uses hard coded credentials
Use of Hard-coded Credentials in GitHub repository microweber/microweber 1.3.4 and prior. A patch is available and anticipated to be part of version 2.0...
Microweber uses hard coded credentials
Use of Hard-coded Credentials in GitHub repository microweber/microweber 1.3.4 and prior. A patch is available and anticipated to be part of version 2.0...
CVE-2023-5318
Use of Hard-coded Credentials in GitHub repository microweber/microweber prior to 2.0...
Hardcoded credentials
Use of Hard-coded Credentials in GitHub repository microweber/microweber prior to 2.0...
CVE-2023-5318
CVE-2023-5318 affects microweber/microweber prior to version 2.0, where hard-coded credentials are used in the repository. The issue originates from hard-coded credentials and is addressed by upgrading to version 2.0 or later (a patch is available/anticipated in 2.0). Impact details are stated in...
CVE-2023-5318 Use of Hard-coded Credentials in microweber/microweber
Use of Hard-coded Credentials in GitHub repository microweber/microweber prior to 2.0...
Microweber Trust Management Issues Vulnerabilities
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A vulnerability with trust management issues exists in Microweber versions prior to 2.0,...
PT-2023-32038 · Unknown · Microweber
Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 2.0 Description: The issue concerns the use of hard-coded credentials in the GitHub repository microweber/microweber. A patch is available and is anticipated to be part of version 2.0. Recommendations:...
Microweber Cross-site Scripting vulnerability
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber 1.3.4 and prior. A patch is available and anticipated to be part of the 2.x branch...
GHSA-RGF9-J7GV-RQ22 Microweber Cross-site Scripting vulnerability
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber 1.3.4 and prior. A patch is available and anticipated to be part of the 2.x branch...