CVE-2022-2280

The CVE-2022-2280 issue affects microweber/microweber prior to 1.2.19 and is a stored XSS vulnerability. Public sources indicate the vulnerability arises from SVG content not being properly sanitized (plupload.php), allowing injected JavaScript when an SVG is processed. CVSS 3.1 base score is 5.4...

CVE-2022-2280 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...

Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 1.2.19. An...

Open Redirect

microweber/microweber is vulnerable to open redirect. An attacker can redirect users to malicious URLs through the redirect function of UrlManager.php...

GHSA-437J-5QC3-C589 Open Redirect in microweber

Open Redirect in GitHub repository microweber/microweber prior to 1.2.19...

CVE-2022-2252

Open Redirect in GitHub repository microweber/microweber prior to 1.2.19...

CVE-2022-2252

Open Redirect in GitHub repository microweber/microweber prior to 1.2.19...

Open redirect

Open Redirect in GitHub repository microweber/microweber prior to 1.2.19...

CVE-2022-2252 Open Redirect in microweber/microweber

Open Redirect in GitHub repository microweber/microweber prior to 1.2.19...

CVE-2022-2252

CVE-2022-2252 describes an Open Redirect vulnerability in microweber/microweber prior to version 1.2.19. The connected records confirm an open redirect issue affecting that GitHub project, with multiple sources (NVD, OSV, Red Hat advisories) referencing the same vulnerability. The materials do no...

CVE-2022-2252 Open Redirect in microweber/microweber

Open Redirect in GitHub repository microweber/microweber prior to 1.2.19...

Microweber 输入验证错误漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. An input validation error vulnerability exists in Microweber version 1.2.19, which stems...

Microweber cross-site scripting vulnerability (CNVD-2022-58246)

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 1.2.18. The...

Cross-site Scripting (XSS)

microweber/microweber is vulnerable to cross-site scriptingXSS attacks. A remote attacker is able to inject and execute malicious javascript via bypassing XSS filters in index.php, resulting in cookie stealing and account takeover...

GHSA-3X96-M42V-HVH5 Cross-site Scripting in Microweber

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.18...

Cross-site Scripting in Microweber

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.18...

CVE-2022-2174

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.18...

CVE-2022-2174

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.18...

Cross site scripting

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.18...

CVE-2022-2174 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.18...