GHSA-XG72-6C83-GHH4 Microweber Stored Cross-site Scripting before v1.2.20

Microwerber prior to version 1.2.20 is vulnerable to stored Cross-site Scripting XSS...

Microweber Stored Cross-site Scripting before v1.2.20

Microwerber prior to version 1.2.20 is vulnerable to stored Cross-site Scripting XSS...

GHSA-CFCG-2QGR-V243 Microweber before 1.2.21 vulnerable to reflected XSS

Microweber prior to 1.2.21 is vulnerable to reflected cross-site scripting XSS...

Microweber before 1.2.21 vulnerable to reflected XSS

Microweber prior to 1.2.21 is vulnerable to reflected cross-site scripting XSS...

CVE-2022-2470

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...

CVE-2022-2470

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...

Cross site scripting

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...

CVE-2022-2470

CVE-2022-2470 : Microweber before 1.2.21 is vulnerable to reflected XSS. Affected product/component: Microweber (microweber/microweber). Root cause/technical details are not fully described in the provided documents beyond the XSS indication; impact is stated as reflective XSS exposure. Remediati...

CVE-2022-2470 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...

CVE-2022-2470 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...

CVE-2022-2495

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.21...

CVE-2022-2495

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.21...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.21...

CVE-2022-2495

Microweber (GitHub: microweber/microweber) is affected by a stored Cross-site Scripting (XSS) vulnerability arising in versions prior to 1.2.21. The issue stems from how SVG uploads are handled, allowing stored XSS when users upload SVG files. Multiple sources (CVE-2022-2495 records, CNVD-2022-54...

CVE-2022-2495 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.21...

Microweber 跨站脚本漏洞

Microweber is a drag-and-drop online store management system from the US Microweber community. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in versions of Microweber prior to 1.2.21. An attacker could use this vulnerability to execute...

The vulnerability of the Microweber content management system arises from the lack of measures taken to protect the website structure, allowing attackers to carry out XSS attacks.

The vulnerability of the Microweber content management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag-and-drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in versions of Microweber prior to 1.2.21, which...

CVE-2021-36461

An Arbitrary File Upload vulnerability exists in Microweber 1.1.3 that allows attackers to getshell via the Settings Upload Picture section by uploading pictures with malicious code, user.ini...

CVE-2021-36461

An Arbitrary File Upload vulnerability exists in Microweber 1.1.3 that allows attackers to getshell via the Settings Upload Picture section by uploading pictures with malicious code, user.ini...