GHSA-7X2H-3V2V-24P9 Cross-Site Request Forgery in microweber

microweber version 1.2.10 and prior is vulnerable to cross-site request forgery...

Generation of Error Message Containing Sensitive Information in microweber

microweber version 1.2.10 and prior may generate an error message containing sensitive information...

GHSA-XXQ4-3742-3H28 Generation of Error Message Containing Sensitive Information in microweber

microweber version 1.2.10 and prior may generate an error message containing sensitive information...

GHSA-JJVM-3MFQ-7GC7 Cross-site Scripting in microweber

microweber version 1.2.10 and prior is vulnerable to cross-site scripting...

CVE-2022-0505

Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0505

Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0504

Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0506

Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0504

Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0506

Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...

Cross site scripting

Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...

Information disclosure

Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0504 Generation of Error Message Containing Sensitive Information in microweber/microweber

Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0504 Generation of Error Message Containing Sensitive Information in microweber/microweber

Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0504

CVE-2022-0504 affects microweber/microweber prior to 1.2.11. The issue is the generation of error messages that may contain sensitive information, leading to potential information disclosure. CVSS data in the records indicates confidentiality impact as HIGH (network exploitability, low complexity...

CVE-2022-0505

CVE-2022-0505 affects microweber/microweber before 1.2.11. The connected documents identify it as a Cross-Site Request Forgery (CSRF) vulnerability. The core issue is a CSRF exposure in Packagist microweber/microweber prior to 1.2.11; there are no details on the exact root cause in these sources....

CVE-2022-0505 Cross-Site Request Forgery (CSRF) in microweber/microweber

Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0505 Cross-Site Request Forgery (CSRF) in microweber/microweber

Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0506 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0506

CVE-2022-0506 is a Cross-site Scripting (XSS) vulnerability stored in the microweber/microweber package prior to version 1.2.11. The Red Hat, NVD, OSV, and CNVD records consistently describe a stored XSS flaw where user-supplied input is not properly sanitized, allowing injected script to be exec...