1388 matches found
Insecure Storage of Sensitive Information
Vulnerability name: EXIF Geolocation Data Not Stripped From Uploaded Images vulnerability Description:- When the user uploads his profile picture, the uploaded image’s EXIF Geolocation Data does not get stripped. As a result, anyone can get sensitive information of microweber users like their...
GHSA-5875-P652-2PPM Exposure of Resource to Wrong Sphere in microweber
Exposure of Resource to Wrong Sphere in microweber prior to 1.3 allows users to add deleted products to a cart and buy it...
Exposure of Resource to Wrong Sphere in microweber
Exposure of Resource to Wrong Sphere in microweber prior to 1.3 allows users to add deleted products to a cart and buy it...
GHSA-6M26-25Q2-CQ46 Cross-site Scripting in microweber
Microweber Cross-site Scripting XSS - Stored XSS vulnerability on admin page up to version 1.3...
GHSA-4P92-FV6V-FHFJ Cross-site Scripting in microweber
Microweber prior to 1.2.11 is vulnerable to reflected cross-site scripting...
Cross-site Scripting in microweber
Microweber Cross-site Scripting XSS - Stored XSS vulnerability on admin page up to version 1.3...
Cross-site Scripting in microweber
Microweber prior to 1.2.11 is vulnerable to reflected cross-site scripting...
CVE-2022-0723
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.11...
CVE-2022-0723
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.11...
Cross site scripting
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.11...
CVE-2022-0723 Cross-site Scripting (XSS) - Reflected in microweber/microweber
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.11...
CVE-2022-0723 Cross-site Scripting (XSS) - Reflected in microweber/microweber
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.11...
CVE-2022-0723
CVE-2022-0723 affects microweber/microweber prior to 1.2.11, with a reflected XSS due to insufficient validation of client-side data. Multiple sources (NVD, Red Hat, OSV, CVE lists) confirm reflected XSS in this version. The vulnerability is mitigated by upgrading to 1.2.11 or later, as indicated...
CVE-2022-0763
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0762
Incorrect Authorization in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0762
Incorrect Authorization in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0763
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3...
Authorization
Incorrect Authorization in GitHub repository microweber/microweber prior to 1.3...