Microweber Improper Access Control vulnerability

Improper Access Control in GitHub repository microweber/microweber prior to 2.0.0...

GHSA-Q57G-38PC-JWV8 Microweber Improper Access Control vulnerability

Improper Access Control in GitHub repository microweber/microweber prior to 2.0.0...

Stored Cross-site Scripting (XSS)

microweber/microweber is vulnerable to Cross-Site Scripting. This vulnerability exists because it does not properly validate files in the picture upload feature, allowing an attacker to inject and execute malicious JavaScript into the browser...

The vulnerability of the Microweber content management system lies in the insufficient protection of operational data, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the Microweber content management system is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Microweber content management system, related to deficiencies in the error reporting mechanism, allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Microweber content management system is related to deficiencies in the mechanism for generating error reports. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Microweber content management system arises from the lack of measures taken to protect the website structure. This allows attackers to carry out XSS attacks.

The vulnerability of the Microweber content management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

GHSA-JMWM-W2RM-PRV9 Microweber Cross-site Scripting vulnerability

Microweber CMS prior to version 2.0.3 is vulnerable to stored Cross Site Scripting XSS via the profile picture file upload functionality...

Microweber Cross-site Scripting vulnerability

Microweber CMS prior to version 2.0.3 is vulnerable to stored Cross Site Scripting XSS via the profile picture file upload functionality...

CVE-2023-47379

Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting XSS via the profile picture file upload functionality...

CVE-2023-47379

Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting XSS via the profile picture file upload functionality...

Microweber Security Breach

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber CMS version 2.0.1, which stems from the...

CVE-2023-47379

Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting XSS via the profile picture file upload functionality...

CVE-2023-47379

Microweber CMS is affected by CVE-2023-47379: stored Cross-Site Scripting via the profile picture upload in version 2.0.1. The root cause is improper validation of uploaded image files in the profile picture feature, enabling injected script execution in users’ browsers. Public references indicat...

CVE-2023-47379

Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting XSS via the profile picture file upload functionality...

PT-2023-30436 · Microweber · Microweber Cms

Name of the Vulnerable Software and Affected Versions: Microweber CMS versions 2.0.1 through 2.0.2 Description: The issue is related to stored Cross Site Scripting XSS via the profile picture file upload functionality. This allows an attacker to inject malicious scripts into the website,...

CVE-2023-47379

Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting XSS via the profile picture file upload functionality...

CVE-2023-47379

Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting XSS via the profile picture file upload functionality...

CVE-2023-47379: Improper Neutralization of Input During Web Page Generation

Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting XSS via the profile picture file upload functionality...

CVE-2023-5976

Improper Access Control in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-5976

The CVE-2023-5976 entry concerns Microweber (microweber/microweber) prior to version 2.0.0 with an improper access control flaw. Multiple connected sources identify the root cause as insufficient restrictions that allow unauthorized actions (e.g., commenting on unpublished blog content). Context ...