1530 matches found
CVE-2022-2353 Cross-Site Request Forgery (CSRF) in microweber/microweber
Prior to microweber/microweber v1.2.20, due to improper neutralization of input, an attacker can steal tokens to perform cross-site request forgery, fetch contents from same-site and redirect a user...
Cross-site Scripting (XSS)
microweber/microweber is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization of input allowing an attacker to inject maliciously crafted script into the system via HTTP request...
GHSA-Q6MP-562X-GGVV Cross-site Scripting in microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
Cross-site Scripting in microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
CVE-2022-2300
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
CVE-2022-2300
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
CVE-2022-2300 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
CVE-2022-2300 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
CVE-2022-2300
CVE-2022-2300 affects microweber/microweber with a Stored XSS in versions prior to 1.2.19. Multiple sources (NVD/huntr/Veracode OSV/GHSA) describe a lack of input sanitization as the underlying issue, enabling attacker-supplied script via HTTP requests. Impact described in CVSS notes is Low to Lo...
Cross-Site Scripting (XSS)
microweber/microweber is vulnerable to stored cross-site scripting. The vulnerability exists in plupload.php because SVG content is not properly sanitized which allows an attacker to inject and execute malicious javascript on the users who will open the link of the SVG file...
CVE-2022-2300: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
Microweber 跨站脚本漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 1.2.19. An...
GHSA-5PG2-QG87-VMJ7 Cross-site Scripting in microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
Cross-site Scripting in microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
CVE-2022-2280
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
CVE-2022-2280 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
CVE-2022-2280
The CVE-2022-2280 issue affects microweber/microweber prior to 1.2.19 and is a stored XSS vulnerability. Public sources indicate the vulnerability arises from SVG content not being properly sanitized (plupload.php), allowing injected JavaScript when an SVG is processed. CVSS 3.1 base score is 5.4...