1398 matches found
CVE-2023-1081 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.3...
CVE-2023-1081
Summary : CVE-2023-1081 is a stored XSS vulnerability in microweber/microweber versions prior to 1.3.3. The issue arises from input handling that allows injection of malicious scripts stored on the server. Affected software : microweber/microweber (prior to 1.3.3). Impact : user-facing scripts ex...
PT-2023-16739 · Unknown · Microweber
Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.3.3 Description: The issue is related to Cross-site Scripting XSS - Stored, which allows attackers to inject malicious scripts into the website. A patch is available and is anticipated to be part of...
Microweber 跨站脚本漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in microweber/microweber versions prior to...
CVE-2023-1081 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.3...
Microweber Cross-site Scripting vulnerability
Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted i...
GHSA-MV37-XRMC-HF64 Microweber Cross-site Scripting vulnerability
Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted i...
CVE-2021-32856
Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted i...
CVE-2021-32856
Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted i...
Cross site scripting
Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted i...
Microweber 跨站脚本漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber 1.2.12 and earlier versions, which stems...
CVE-2021-32856 Microweber vulnerable to Cross-site Scripting
Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted i...
CVE-2021-32856
CVE-2021-32856 affects Microweber (drag-and-drop CMS). Connected sources confirm that versions 1.2.12 and older are vulnerable to a copy-paste cross-site scripting (XSS) issue occurring when a user is enticed to paste a malicious payload into the text editor. The root cause is described as an inc...
CVE-2021-32856 Microweber vulnerable to Cross-site Scripting
Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted i...
PT-2023-12188 · Unknown · Microweber
Name of the Vulnerable Software and Affected Versions: Microweber versions 1.2.12 and prior Description: The issue concerns a copy-paste cross-site scripting XSS flaw. This type of XSS requires the victim to be tricked into copying a malicious payload into the text editor. Recommendations: For...
Microweber Cross-Site Scripting Vulnerability (CNVD-2023-07919)
Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in versions of Microweber prior to 1.3.2, which stems from a security issue in...
Cross-Site Scripting (XSS)
microweber/microweber is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the special characters before it output to the front end, allowing an attacker to inject and execute malicious JavaScript on victim's browser...
Microweber contains Cross-site Scripting
Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...