CVE-2022-2174

CVE-2022-2174 affects Microweber prior to 1.2.18. The NVD and related sources describe a reflected XSS in microweber/microweber, where user input in the type parameter can be reflected in the page. The confirmed impact is the potential execution of injected JavaScript, which could enable session ...

CVE-2022-2174 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.18...

Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 1.2.18. The...

Microweber Cross-Site Scripting Vulnerability

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 1.2.17, whic...

Cross-site Scripting (XSS)

microweber/microweber is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in the type parameter, allowing an attacker to inject and execute malicious javascript...

Cross-site Scripting in Microweber

Microweber versions 1.2.17 and prior are vulnerable to cross-site scripting. A patch is available on the dev laravel9-php8 branch of the repository...

GHSA-27G3-58V4-FG9W Cross-site Scripting in Microweber

Microweber versions 1.2.17 and prior are vulnerable to cross-site scripting. A patch is available on the dev laravel9-php8 branch of the repository...

CVE-2022-2130

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.17...

CVE-2022-2130

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.17...

Cross site scripting

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.17...

CVE-2022-2130 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.17...

CVE-2022-2130

CVE-2022-2130 is a reflected XSS in Microweber CMS prior to 1.2.17. Multiple connected sources (Nuclei template, CNVD/CW, OSV, and CVE aggregations) describe a vulnerability in Microweber ≤1.2.16 where the /demo/editor_tools/module endpoint accepts a type parameter that may be reflected in the br...

Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 1.2.17, whic...

Microweber CMS 1.2.15 - Account Takeover Vulnerability

Exploit Title: Microweber CMS 1.2.15 - Account Takeover Exploit Author: Manojkumar J Vendor Homepage: https://github.com/microweber/microweber Software Link: https://github.com/microweber/microweber/releases/tag/v1.2.15 Version: =1.2.15 Tested on: Windows10 CVE : CVE-2022-1631 Description:...

Microweber CMS 1.2.15 Account Takeover

Exploit Title: Microweber CMS 1.2.15 - Account Takeover Date: 2022-05-09 Exploit Author: Manojkumar J Vendor Homepage: https://github.com/microweber/microweber Software Link: https://github.com/microweber/microweber/releases/tag/v1.2.15 Version: =1.2.15 Tested on: Windows10 CVE : CVE-2022-1631...

Microweber CMS 1.2.15 - Account Takeover

Exploit Title: Microweber CMS 1.2.15 - Account Takeover Date: 2022-05-09 Exploit Author: Manojkumar J Vendor Homepage: https://github.com/microweber/microweber Software Link: https://github.com/microweber/microweber/releases/tag/v1.2.15 Version: =1.2.15 Tested on: Windows10 CVE : CVE-2022-1631...

Path Traversal via Files Manager

Description Please enter a description of the vulnerability. Steps to reproduce 1.Login to admin panel and go to Modules - Files http://localhost/microweber/admin/view:modules/loadmodule:files 2.Click any file, the url will have the following format:...

GHSA-G7R3-JWHW-2WFV Microweber Insufficient Session Expiry

Microweber v1.1.18 is affected by no session expiry after log-out...

Microweber Insufficient Session Expiry

Microweber v1.1.18 is affected by no session expiry after log-out...

Microweber Discloses Sensitive Information

userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a /modules/ POST request...