CVE-2022-0929

The CVE-2022-0929 issue affects microweber/microweber, specifically the dynamic_text module. Reported as a cross-site scripting (XSS) vulnerability in the dynamic_text component, with vulnerable versions noted as prior to 1.2.11 (and related advisories referencing up to 1.2.12). The root cause is...

CVE-2022-0929 XSS on dynamic_text module in microweber/microweber

XSS on dynamictext module in GitHub repository microweber/microweber prior to 1.2.11...

CVE-2022-0929

XSS on dynamictext module in GitHub repository microweber/microweber prior to 1.2.11...

CVE-2022-0929 XSS on dynamic_text module in microweber/microweber

XSS on dynamictext module in GitHub repository microweber/microweber prior to 1.2.11...

CVE-2022-0926

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...

CVE-2022-0926

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...

Unrestricted file upload

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...

CVE-2022-0926

The CVE-2022-0926 entry concerns Microweber (microweber/microweber). A vulnerability in the file upload filter allows bypassing input validation, leading to stored XSS. Affected version range: prior to 1.2.12. The root cause is improper validation in the file upload handling, enabling injection o...

CVE-2022-0926

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...

CVE-2022-0926 File upload filter bypass leading to stored XSS in microweber/microweber

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...

CVE-2022-0926 File upload filter bypass leading to stored XSS in microweber/microweber

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...

Integer Overflow or Wraparound in Microweber

Microweber prior to 1.2.12 is vulnerable to Integer Overflow or Wraparound...

GHSA-C383-Q5VF-HX55 Integer Overflow or Wraparound in Microweber

Microweber prior to 1.2.12 is vulnerable to Integer Overflow or Wraparound...

GHSA-JJP3-M93H-5JM4 Cross-site Scripting in microweber

Microweber drag and drop website builder and CMS with e-commerce. Cross-site Scripting XSS discovered in microweber prior to 1.2.12. There is currently no known workaround, users are recommended to update to version 1.2.12...

Cross-site Scripting in microweber

Microweber drag and drop website builder and CMS with e-commerce. Cross-site Scripting XSS discovered in microweber prior to 1.2.12. There is currently no known workaround, users are recommended to update to version 1.2.12...

Unrestricted Upload of File with Dangerous Type in Microweber

In Microweber prior to 1.2.12, a malicious actor may abuse the Backup/Restore feature to achieve Remote Code Execution...

GHSA-J878-43HM-8GR5 Unrestricted Upload of File with Dangerous Type in Microweber

In Microweber prior to 1.2.12, a malicious actor may abuse the Backup/Restore feature to achieve Remote Code Execution...

CVE-2022-0926: Improper Neutralization of Input During Web Page Generation

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...

PT-2022-13534

Name of the Vulnerable Software and Affected Versions microweber/microweber versions prior to 1.2.12 Description The issue is related to a file upload filter bypass, which can lead to stored XSS. Recommendations For versions prior to 1.2.12, update to version 1.2.12 or later to resolve the issue...

Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber before 1.2.11. The vulnerability stems fro...