Microweber 安全漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images and more. A security vulnerability exists in Microweber versions prior to 1.3.4, which stems from...

CVE-2023-2240 Improper Privilege Management in microweber/microweber

Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4...

CVE-2023-2240 Improper Privilege Management in microweber/microweber

Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4...

CVE-2023-2240

CVE-2023-2240 affects Microweber/microweber prior to version 1.3.4. The root cause is improper privilege management, leading to high-severity impact across confidentiality, integrity, and availability (per CVSS 3.1/3.0 data: HIGH). No exploit details are provided in the supplied documents. The vu...

Microweber 安全漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. An information disclosure vulnerability exists in Microweber versions prior to 1.3.4,...

PT-2023-18483 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber versions prior to 1.3.4 Description: The issue concerns Improper Privilege Management in the microweber repository. No information is provided about the estimated number of potentially affected devices worldwide or real-world...

CVE-2023-2239

CVE-2023-2239 concerns an information disclosure in the Microweber project microweber/microweber prior to version 1.3.4, enabling exposure of private personal information to unauthorized actors. The issue is documented across multiple sources (including CNVD/OSV and vendor advisories) and is asso...

PT-2023-18482 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.3.4 Description: The issue involves exposure of private personal information to an unauthorized actor. This occurs in the GitHub repository microweber/microweber. Recommendations: For versions prior t...

GHSA-F4G6-C47X-QHWW Microweber vulnerable to cross-site scripting (XSS)

microweber/microweber prior to 1.3.3 is vulnerable to cross-site scripting XSS in the template selection while changing a group template...

Microweber vulnerable to cross-site scripting (XSS)

microweber/microweber prior to 1.3.3 is vulnerable to cross-site scripting XSS in the template selection while changing a group template...

CVE-2023-2014

Cross-site Scripting XSS - Generic in GitHub repository microweber/microweber prior to 1.3.3...

Cross site scripting

Cross-site Scripting XSS - Generic in GitHub repository microweber/microweber prior to 1.3.3...

CVE-2023-2014 Cross-site Scripting (XSS) - Generic in microweber/microweber

Cross-site Scripting XSS - Generic in GitHub repository microweber/microweber prior to 1.3.3...

CVE-2023-2014 Cross-site Scripting (XSS) - Generic in microweber/microweber

Cross-site Scripting XSS - Generic in GitHub repository microweber/microweber prior to 1.3.3...

Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 1.3.3 that...

CVE-2023-2014

CVE-2023-2014 affects microweber/microweber prior to version 1.3.3. The vulnerability is a Cross-site Scripting (XSS) in the template selection, stemming from insufficient sanitization of user input in the template parameter of template.php. Impact stated in sources is arbitrary JavaScript execut...

CVE-2023-2014 Cross-site Scripting (XSS) - Generic in microweber/microweber

Cross-site Scripting XSS - Generic in GitHub repository microweber/microweber prior to 1.3.3...

GHSA-582P-2FPG-X226 Microweber vulnerable to command injection

microweber/microweber prior to 1.3.3 is vulnerable to command injection in the "first name" field. This allows for server-side template injection, which can lead to arbitrary code execution...

Microweber vulnerable to stored cross-site scripting (XSS) via X-Forwarded-For header

microweber/microweber prior to 1.3.3 is vulnerable to stored cross-site scripting XSS via the X-Forwarded-For header. This was fixed in version 1.3.3...

GHSA-HHJM-MPMF-CXG9 Microweber vulnerable to stored cross-site scripting (XSS) via X-Forwarded-For header

microweber/microweber prior to 1.3.3 is vulnerable to stored cross-site scripting XSS via the X-Forwarded-For header. This was fixed in version 1.3.3...