1389 matches found
Cross site scripting
Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted i...
Microweber 跨站脚本漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber 1.2.12 and earlier versions, which stems...
PT-2023-12188 · Unknown · Microweber
Name of the Vulnerable Software and Affected Versions: Microweber versions 1.2.12 and prior Description: The issue concerns a copy-paste cross-site scripting XSS flaw. This type of XSS requires the victim to be tricked into copying a malicious payload into the text editor. Recommendations: For...
CVE-2021-32856
CVE-2021-32856 affects Microweber (drag-and-drop CMS). Connected sources confirm that versions 1.2.12 and older are vulnerable to a copy-paste cross-site scripting (XSS) issue occurring when a user is enticed to paste a malicious payload into the text editor. The root cause is described as an inc...
CVE-2021-32856 Microweber vulnerable to Cross-site Scripting
Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted i...
CVE-2021-32856 Microweber vulnerable to Cross-site Scripting
Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted i...
Microweber Cross-Site Scripting Vulnerability (CNVD-2023-07919)
Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in versions of Microweber prior to 1.3.2, which stems from a security issue in...
Cross-Site Scripting (XSS)
microweber/microweber is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the special characters before it output to the front end, allowing an attacker to inject and execute malicious JavaScript on victim's browser...
GHSA-PJ97-R83V-VJ7F Microweber contains Cross-site Scripting
Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...
Microweber contains Cross-site Scripting
Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...
CVE-2023-0608
Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...
Cross site scripting
Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...
Microweber 跨站脚本漏洞
Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in versions of Microweber prior to 1.3.2, which stems from a security issue in...
CVE-2023-0608 Cross-site Scripting (XSS) - DOM in microweber/microweber
Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...
CVE-2023-0608
Microweber (microweber/microweber) before version 1.3.2 is affected by a DOM-based Cross-site Scripting (XSS) vulnerability. The issue enables malicious scripts to run in the victim’s browser. Remedy: upgrade to 1.3.2 or later (as documented in connected advisories).
CVE-2023-0608 Cross-site Scripting (XSS) - DOM in microweber/microweber
Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...
CVE-2023-0608 Cross-site Scripting (XSS) - DOM in microweber/microweber
Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...
PT-2023-16398 · Unknown · Microweber
Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.3.2 Description: The issue is related to Cross-site Scripting XSS - DOM, which allows an attacker to execute malicious scripts in the browser. This can lead to unauthorized access to sensitive...
Unrestricted File Upload
microweber/microweber is vulnerable to unrestricted file upload. The sanitization filter bypass in plupload.php allows a remote authenticated attacker to upload files outside the intended locations...