Cross site scripting

Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...

CVE-2023-0608 Cross-site Scripting (XSS) - DOM in microweber/microweber

Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...

CVE-2023-0608 Cross-site Scripting (XSS) - DOM in microweber/microweber

Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...

CVE-2023-0608 Cross-site Scripting (XSS) - DOM in microweber/microweber

Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...

Microweber 跨站脚本漏洞

Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in versions of Microweber prior to 1.3.2, which stems from a security issue in...

CVE-2023-0608

Microweber (microweber/microweber) before version 1.3.2 is affected by a DOM-based Cross-site Scripting (XSS) vulnerability. The issue enables malicious scripts to run in the victim’s browser. Remedy: upgrade to 1.3.2 or later (as documented in connected advisories).

PT-2023-16398 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.3.2 Description: The issue is related to Cross-site Scripting XSS - DOM, which allows an attacker to execute malicious scripts in the browser. This can lead to unauthorized access to sensitive...

Unrestricted File Upload

microweber/microweber is vulnerable to unrestricted file upload. The sanitization filter bypass in plupload.php allows a remote authenticated attacker to upload files outside the intended locations...

Microweber vulnerable to unrestricted malicious uploads

Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2...

GHSA-8H43-XG5G-9CJ7 Microweber vulnerable to unrestricted malicious uploads

Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2...

Unrestricted file upload

Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2...

Cross-site Scripting (XSS)

microweber/microwebe is vulnerable to cross-site scripting. The vulnerability exists due to lack of sanitization in the html elements which allows an attacker to inject and execute malicious javascript...

Microweber cross-site scripting vulnerability (CNVD-2023-00003)

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 1.3.2, which...

Microweber 代码问题漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A code issue vulnerability exists in Microweber versions prior to 1.3.2, which stems fro...

CVE-2022-4732 Unrestricted Upload of File with Dangerous Type in microweber/microweber

Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2...

PT-2022-28046 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.3.2 Description: The issue concerns an unrestricted upload of files with dangerous types. There is no information provided about the estimated number of potentially affected devices worldwide or detai...

CVE-2022-4732 Unrestricted Upload of File with Dangerous Type in microweber/microweber

Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2...

Reflected Cross-Site Scripting (XSS)

microweber/microweber is vulnerable to reflected cross-site scripting XSS attacks. The library does not properly validate the POST parameter namespaceMD5, allowing an attacker to inject and execute malicious JavaScript...

GHSA-9CMM-52CV-6HVC Microweber vulnerable to Stored Cross-Site Scripting

Microweber versions 1.3.1 and prior are vulnerable to stored Cross-site Scripting XSS. A patch is available on the 1.4, dev, and laravel-sail branches...

Microweber vulnerable to Stored Cross-Site Scripting

Microweber versions 1.3.1 and prior are vulnerable to stored Cross-site Scripting XSS. A patch is available on the 1.4, dev, and laravel-sail branches...