1712 matches found
CVE-2022-3242 HTML code Injection in template search keyword in microweber/microweber
Code Injection in GitHub repository microweber/microweber prior to 1.3.2...
CVE-2022-3242
CVE-2022-3242 affects microweber/microweber prior to version 1.3.2. The issue is a Code Injection/HTML injection in the search path (e.g., search.php?keywords=) that can be exploited to inject JavaScript, with potential consequences such as credential/session exposure and content modification as ...
CVE-2022-3242 HTML code Injection in template search keyword in microweber/microweber
Code Injection in GitHub repository microweber/microweber prior to 1.3.2...
Microweber 跨站脚本漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber versions prior to 1.3.2. An attacker can...
Microweber 跨站脚本漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber, which stems from an HTML...
CVE-2022-3242: Improper Control of Generation of Code
Code Injection in GitHub repository microweber/microweber prior to 1.3.2...
HTML Injection vulnerability in create tag functionality
Vulnerability Details In the Microweber CMS, While doing a live edit on to the application, we have the option to create a new global tag in the application. While creating a global tag, the "Tag Name" input field doesn't properly get sanitized and it's vulnerable to HTML Injection vulnerability...
GHSA-CF6R-Q678-F2P7 Microweber's title parameter in the body of POST request vulnerable to stored XSS
In Microweber prior to v1.3.1, the title parameter in the body of POST request when creating/editing a category is vulnerable to stored cross-site scripting...
Microweber's title parameter in the body of POST request vulnerable to stored XSS
In Microweber prior to v1.3.1, the title parameter in the body of POST request when creating/editing a category is vulnerable to stored cross-site scripting...
Cross Site Scripting (XSS)
Microweber is vulnerable to stored Cross Site Scripting. The vulnerability is due to improper sanitization in the product category title field. An authenticated attacker can add or modify a category, adding an Iframe script tag to the title that will run arbitrary Javascript whenever a user visit...
CVE-2022-2777
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.1...
CVE-2022-2777
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.1...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.1...
CVE-2022-2777 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.1...
CVE-2022-2777
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.1...
CVE-2022-2777
CVE-2022-2777 is a stored XSS in Microweber (microweber/microweber) prior to v1.3.1. The vulnerability affects the title parameter in the body of POST requests when creating/editing a category, allowing injection that is stored and rendered to other users. Multiple sources (NVD, OSV, CVE lists, a...
CVE-2022-2777 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.1...
Microweber 跨站脚本漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 1.3.1. An...
PT-2022-18575 · Unknown · Microweber
Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.3.1 Description: The issue is related to Cross-site Scripting XSS - Stored. In the GitHub repository microweber/microweber, the title parameter in the body of a POST request when creating or editing a...