1712 matches found
CVE-2023-1881 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.3...
CVE-2023-1877 Command Injection in microweber/microweber
Command Injection in GitHub repository microweber/microweber prior to 1.3.3...
PT-2023-17305 · Unknown · Microweber
Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.3.3 Description: The issue is related to command injection in the GitHub repository microweber/microweber. Specifically, the "first name" field is vulnerable, allowing for server-side template...
CVE-2023-1877 Command Injection in microweber/microweber
Command Injection in GitHub repository microweber/microweber prior to 1.3.3...
PT-2023-17309
Name of the Vulnerable Software and Affected Versions microweber/microweber versions prior to 1.3.3 Description The issue is related to stored Cross-site Scripting XSS in the GitHub repository microweber/microweber. This occurs via the X-Forwarded-For header. Recommendations For versions prior to...
CVE-2023-1877
CVE-2023-1877 affects microweber/microweber prior to 1.3.3. The vulnerability is a command injection in the submission of the first name field, which can lead to server-side template injection and arbitrary code execution. Exploitation details are not provided in the connected documents beyond th...
CVE-2023-1881 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.3...
CVE-2023-1881: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.3...
CVE-2023-1877: Improper Neutralization of Special Elements used in a Command
Command Injection in GitHub repository microweber/microweber prior to 1.3.3...
Cross-Site Scripting (XSS)
microweber/microweber is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to a lack of santization of user inputs in the admin settings, which allows an admin authenticated attacker to inject and execute arbitrary JavaScript into the system...
GHSA-C2RC-8M9F-G4FH Microweber Cross-site Scripting vulnerability
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber 1.3.2 and prior. A patch is available and anticipated to be part of version 1.3.3...
CVE-2023-1081
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.3...
CVE-2023-1081
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.3...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.3...
Microweber 跨站脚本漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in microweber/microweber versions prior to...
CVE-2023-1081
Summary : CVE-2023-1081 is a stored XSS vulnerability in microweber/microweber versions prior to 1.3.3. The issue arises from input handling that allows injection of malicious scripts stored on the server. Affected software : microweber/microweber (prior to 1.3.3). Impact : user-facing scripts ex...
PT-2023-16739 · Unknown · Microweber
Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.3.3 Description: The issue is related to Cross-site Scripting XSS - Stored, which allows attackers to inject malicious scripts into the website. A patch is available and is anticipated to be part of...
CVE-2023-1081
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.3...