CVE-2022-4647

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.2...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.2...

CVE-2022-4647 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.2...

CVE-2022-4647 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.2...

Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 1.3.2, which...

CVE-2022-4647 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.2...

CVE-2022-4647

CVE-2022-4647 affects microweber/microweber up to version 1.3.2, with a stored XSS vulnerability caused by insufficient input filtering/escaping of user data. Several connected sources confirm the flaw and its impact on Microweber prior to 1.3.2. Exploitation information in the connected data ind...

GHSA-3MMH-VQ9W-4C3G Microweber vulnerable to Reflected Cross-site Scripting

Microweber versions 1.3.1 and prior are vulnerable to Reflected Cross-site Scripting XSS. A patch is available on the 1.4, dev, and laravel-sail branches...

Microweber vulnerable to Reflected Cross-site Scripting

Microweber versions 1.3.1 and prior are vulnerable to Reflected Cross-site Scripting XSS. A patch is available on the 1.4, dev, and laravel-sail branches...

CVE-2022-4617

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.3.2...

Cross site scripting

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.3.2...

PT-2022-27783 · Microweber · Microweber

Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.3.2 Description: The issue is related to Cross-site Scripting XSS - Reflected, which occurs when an application includes user input in its responses without proper validation, allowing an attacker to...

CVE-2022-4617 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.3.2...

CVE-2022-4617

CVE-2022-4617 is a reflected XSS vulnerability in microweber/microweber prior to version 1.3.2. Root cause indicated across connected documents is input reflected in responses (e.g., POST parameter namespaceMD5 per CNNVD). Affected versions are microweber/microweber

Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber 1.3.2 and prior versions, whic...

CVE-2022-4617 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.3.2...

CVE-2022-4617 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.3.2...

Cross-site Scripting (XSS)

microweber/microweber is vulnerable to cross-site scripting. The vulnerability exists due to the lack of validation in select-file parameter which allows a remote attacker to inject and execute malicious JavaScript into the system...

Packagist Microweber Arbitrary File Upload (CVE-2022-0557)

An arbitrary file upload vulnerability exists in Packagist Microweber. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

GHSA-79GX-3FM8-QXQQ Microweber vulnerable to cross-site scripting (XSS)

Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter. There was a patch released in the development branch but is not yet committed to the main branch...