1397 matches found
CVE-2023-47379
Microweber CMS is affected by CVE-2023-47379: stored Cross-Site Scripting via the profile picture upload in version 2.0.1. The root cause is improper validation of uploaded image files in the profile picture feature, enabling injected script execution in users’ browsers. Public references indicat...
CVE-2023-47379
Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting XSS via the profile picture file upload functionality...
CVE-2023-47379
Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting XSS via the profile picture file upload functionality...
Microweber Security Breach
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber CMS version 2.0.1, which stems from the...
CVE-2023-47379
Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting XSS via the profile picture file upload functionality...
CVE-2023-5976
Improper Access Control in GitHub repository microweber/microweber prior to 2.0...
CVE-2023-5976
The CVE-2023-5976 entry concerns Microweber (microweber/microweber) prior to version 2.0.0 with an improper access control flaw. Multiple connected sources identify the root cause as insufficient restrictions that allow unauthorized actions (e.g., commenting on unpublished blog content). Context ...
Microweber Access Control Error Vulnerability
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. An Access Control Error vulnerability exists in Microweber versions prior to 2.0 that...
Stored Cross-Site Scripting (XSS)
microweber is vulnerable to Stored Cross-Site Scripting XSS. The vulnerability lies in the "Dashboard" module, allowing an attacker to inject a malicious script which will be executed once a user visits the affected page...
CVE-2023-5861 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 2.0...
CVE-2023-5861
CVE-2023-5861 affects microweber/microweber prior to 2.0. The linked advisories describe Stored XSS in the Dashboard module, impacting versions before 2.0. Mitigation: update to version 2.0 or later (per PT-Security, CNNVD and related sources). The available documents do not provide detailed expl...
PT-2023-32380 · Unknown · Microweber
Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 2.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which means an attacker can inject malicious scripts into a website, and these scripts will be executed by the browser of othe...
Microweber Cross-Site Scripting Vulnerability
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 2.0, which...
Cross Site Scripting
Microweber is vulnerable to Cross-site Scripting XSS .The vulnerability is due to not sanitizing user provided types and title fields during web page generation. This may lead to an attacker injecting malicious scripts that are executed by the victim's browser by sending a crafted URL that reflec...
Microweber cross-site scripting vulnerability (CNVD-2023-79685)
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 2.0, which...
Hard Coded Credentials
Microweber is vulnerable to the use of Hard Coded Credentials. The vulnerability is due to the hard coding of oauth access token values in the twitterfeedperformapirequest function in userfiles/modules/twitterfeed/functions.php which is required to access twitter API's. This may lead to sensitive...
GHSA-R657-3WQH-G2X9 Microweber uses hard coded credentials
Use of Hard-coded Credentials in GitHub repository microweber/microweber 1.3.4 and prior. A patch is available and anticipated to be part of version 2.0...
Microweber uses hard coded credentials
Use of Hard-coded Credentials in GitHub repository microweber/microweber 1.3.4 and prior. A patch is available and anticipated to be part of version 2.0...
