CVE-2023-0608 Cross-site Scripting (XSS) - DOM in microweber/microweber

Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...

CVE-2023-0608

Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...

CVE-2023-0608 Cross-site Scripting (XSS) - DOM in microweber/microweber

Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...

PT-2023-16398 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.3.2 Description: The issue is related to Cross-site Scripting XSS - DOM, which allows an attacker to execute malicious scripts in the browser. This can lead to unauthorized access to sensitive...

CVE-2023-0608

Microweber (microweber/microweber) before version 1.3.2 is affected by a DOM-based Cross-site Scripting (XSS) vulnerability. The issue enables malicious scripts to run in the victim’s browser. Remedy: upgrade to 1.3.2 or later (as documented in connected advisories).

CVE-2023-0608: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...

CVE-2023-0608 Cross-site Scripting (XSS) - DOM in microweber/microweber

Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...

Unrestricted File Upload

microweber/microweber is vulnerable to unrestricted file upload. The sanitization filter bypass in plupload.php allows a remote authenticated attacker to upload files outside the intended locations...

GHSA-8H43-XG5G-9CJ7 Microweber vulnerable to unrestricted malicious uploads

Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2...

Microweber vulnerable to unrestricted malicious uploads

Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2...

Unrestricted file upload

Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2...

Cross-site Scripting (XSS)

microweber/microwebe is vulnerable to cross-site scripting. The vulnerability exists due to lack of sanitization in the html elements which allows an attacker to inject and execute malicious javascript...

Microweber 代码问题漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A code issue vulnerability exists in Microweber versions prior to 1.3.2, which stems fro...

Microweber cross-site scripting vulnerability (CNVD-2023-00003)

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 1.3.2, which...

CVE-2022-4732

Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2...

CVE-2022-4732 Unrestricted Upload of File with Dangerous Type in microweber/microweber

Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2...

PT-2022-28046 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.3.2 Description: The issue concerns an unrestricted upload of files with dangerous types. There is no information provided about the estimated number of potentially affected devices worldwide or detai...

CVE-2022-4732: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2...

CVE-2022-4732 Unrestricted Upload of File with Dangerous Type in microweber/microweber

Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2...

Reflected Cross-Site Scripting (XSS)

microweber/microweber is vulnerable to reflected cross-site scripting XSS attacks. The library does not properly validate the POST parameter namespaceMD5, allowing an attacker to inject and execute malicious JavaScript...