1712 matches found
CVE-2023-2014 Cross-site Scripting (XSS) - Generic in microweber/microweber
Cross-site Scripting XSS - Generic in GitHub repository microweber/microweber prior to 1.3.3...
PT-2023-17410
Name of the Vulnerable Software and Affected Versions microweber/microweber versions prior to 1.3.3 Description The issue is related to Cross-site Scripting XSS - Generic, which occurs in the template selection while changing a group template. This allows for potential malicious script execution...
CVE-2023-2014
CVE-2023-2014 affects microweber/microweber prior to version 1.3.3. The vulnerability is a Cross-site Scripting (XSS) in the template selection, stemming from insufficient sanitization of user input in the template parameter of template.php. Impact stated in sources is arbitrary JavaScript execut...
CVE-2023-2014: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Generic in GitHub repository microweber/microweber prior to 1.3.3...
CVE-2023-2014
Cross-site Scripting XSS - Generic in GitHub repository microweber/microweber prior to 1.3.3...
CVE-2023-2014 Cross-site Scripting (XSS) - Generic in microweber/microweber
Cross-site Scripting XSS - Generic in GitHub repository microweber/microweber prior to 1.3.3...
GHSA-HHJM-MPMF-CXG9 Microweber vulnerable to stored cross-site scripting (XSS) via X-Forwarded-For header
microweber/microweber prior to 1.3.3 is vulnerable to stored cross-site scripting XSS via the X-Forwarded-For header. This was fixed in version 1.3.3...
GHSA-582P-2FPG-X226 Microweber vulnerable to command injection
microweber/microweber prior to 1.3.3 is vulnerable to command injection in the "first name" field. This allows for server-side template injection, which can lead to arbitrary code execution...
Microweber vulnerable to stored cross-site scripting (XSS) via X-Forwarded-For header
microweber/microweber prior to 1.3.3 is vulnerable to stored cross-site scripting XSS via the X-Forwarded-For header. This was fixed in version 1.3.3...
Microweber vulnerable to command injection
microweber/microweber prior to 1.3.3 is vulnerable to command injection in the "first name" field. This allows for server-side template injection, which can lead to arbitrary code execution...
CVE-2023-1881
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.3...
CVE-2023-1877
Command Injection in GitHub repository microweber/microweber prior to 1.3.3...
Command injection
Command Injection in GitHub repository microweber/microweber prior to 1.3.3...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.3...
编号撤回
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. This CVE number has been withdrawn...
Microweber 跨站脚本漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 1.3.3, which...
CVE-2023-1881
CVE-2023-1881 affects microweber/microweber before version 1.3.3. The vulnerability is a stored Cross-site Scripting (XSS) due to insufficient input sanitization, with exploitable impact via the X-Forwarded-For header in some reports. Public documents identify an in-the-wild or reported risk and ...
Microweber 命令注入漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A command injection vulnerability exists in Microweber versions prior to 1.3.3, which...