1398 matches found
CVE-2022-2777
CVE-2022-2777 is a stored XSS in Microweber (microweber/microweber) prior to v1.3.1. The vulnerability affects the title parameter in the body of POST requests when creating/editing a category, allowing injection that is stored and rendered to other users. Multiple sources (NVD, OSV, CVE lists, a...
CVE-2022-2777 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.1...
PT-2022-18575 · Unknown · Microweber
Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.3.1 Description: The issue is related to Cross-site Scripting XSS - Stored. In the GitHub repository microweber/microweber, the title parameter in the body of a POST request when creating or editing a...
Microweber 跨站脚本漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 1.3.1. An...
Stored XSS on Categories
Description Title parameter in the body of POST request when creating/editing a category is vulnerable to stored XSS. Proof of Concept 1 - Go to https://demo.microweber.org/demo/admin/view:content/action:categories 2 - Create a category or edit an existing one. 3 - Modify the title to an XSS...
Microweber Cross-Site Scripting Vulnerability (CNVD-2022-54328)
Microweber is a drag-and-drop online store management system from the US Microweber community. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in versions of Microweber prior to 1.2.21. An attacker could use this vulnerability to execute...
Microweber Cross-Site Scripting Vulnerability (CNVD-2022-54325)
Microweber is an online store management system that provides drag-and-drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in versions of Microweber prior to 1.2.21, which...
Cross-site Scripting (XSS)
microweber/microweber is vulnerable to cross-site scriptingXSS attacks. The library does not properly sanitize the user input before it outputs to the front end, allowing an attacker to inject and execute malicious javascript via a crafted SVG File...
Cross-Site Scripting (XSS)
microweber/microweber is vulnerable to reflected cross-site scripting. The vulnerability exists in the module function in ApiController.php due to a lack of sanitization in module attributes which allows an attacker to inject and execute malicious payloads...
GHSA-XG72-6C83-GHH4 Microweber Stored Cross-site Scripting before v1.2.20
Microwerber prior to version 1.2.20 is vulnerable to stored Cross-site Scripting XSS...
Microweber Stored Cross-site Scripting before v1.2.20
Microwerber prior to version 1.2.20 is vulnerable to stored Cross-site Scripting XSS...
Microweber before 1.2.21 vulnerable to reflected XSS
Microweber prior to 1.2.21 is vulnerable to reflected cross-site scripting XSS...
GHSA-CFCG-2QGR-V243 Microweber before 1.2.21 vulnerable to reflected XSS
Microweber prior to 1.2.21 is vulnerable to reflected cross-site scripting XSS...
CVE-2022-2470
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...
CVE-2022-2470
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...
Cross site scripting
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...
CVE-2022-2470 Cross-site Scripting (XSS) - Reflected in microweber/microweber
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...
CVE-2022-2470
CVE-2022-2470 : Microweber before 1.2.21 is vulnerable to reflected XSS. Affected product/component: Microweber (microweber/microweber). Root cause/technical details are not fully described in the provided documents beyond the XSS indication; impact is stated as reflective XSS exposure. Remediati...
