CVE-2022-2300 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...

CVE-2022-2300

CVE-2022-2300 affects microweber/microweber with a Stored XSS in versions prior to 1.2.19. Multiple sources (NVD/huntr/Veracode OSV/GHSA) describe a lack of input sanitization as the underlying issue, enabling attacker-supplied script via HTTP requests. Impact described in CVSS notes is Low to Lo...

Cross-Site Scripting (XSS)

microweber/microweber is vulnerable to stored cross-site scripting. The vulnerability exists in plupload.php because SVG content is not properly sanitized which allows an attacker to inject and execute malicious javascript on the users who will open the link of the SVG file...

Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 1.2.19. An...

GHSA-5PG2-QG87-VMJ7 Cross-site Scripting in microweber

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...

Cross-site Scripting in microweber

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...

CVE-2022-2280

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...

CVE-2022-2280 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...

CVE-2022-2280 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...

CVE-2022-2280

The CVE-2022-2280 issue affects microweber/microweber prior to 1.2.19 and is a stored XSS vulnerability. Public sources indicate the vulnerability arises from SVG content not being properly sanitized (plupload.php), allowing injected JavaScript when an SVG is processed. CVSS 3.1 base score is 5.4...

Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 1.2.19. An...

Open Redirect

microweber/microweber is vulnerable to open redirect. An attacker can redirect users to malicious URLs through the redirect function of UrlManager.php...

GHSA-437J-5QC3-C589 Open Redirect in microweber

Open Redirect in GitHub repository microweber/microweber prior to 1.2.19...

CVE-2022-2252

Open Redirect in GitHub repository microweber/microweber prior to 1.2.19...

CVE-2022-2252

Open Redirect in GitHub repository microweber/microweber prior to 1.2.19...

Open redirect

Open Redirect in GitHub repository microweber/microweber prior to 1.2.19...

CVE-2022-2252 Open Redirect in microweber/microweber

Open Redirect in GitHub repository microweber/microweber prior to 1.2.19...

CVE-2022-2252 Open Redirect in microweber/microweber

Open Redirect in GitHub repository microweber/microweber prior to 1.2.19...

CVE-2022-2252

CVE-2022-2252 describes an Open Redirect vulnerability in microweber/microweber prior to version 1.2.19. The connected records confirm an open redirect issue affecting that GitHub project, with multiple sources (NVD, OSV, Red Hat advisories) referencing the same vulnerability. The materials do no...