Stored XSS on Categories

Description Title parameter in the body of POST request when creating/editing a category is vulnerable to stored XSS. Proof of Concept 1 - Go to https://demo.microweber.org/demo/admin/view:content/action:categories 2 - Create a category or edit an existing one. 3 - Modify the title to an XSS...

Microweber Cross-Site Scripting Vulnerability (CNVD-2022-54325)

Microweber is an online store management system that provides drag-and-drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in versions of Microweber prior to 1.2.21, which...

Microweber Cross-Site Scripting Vulnerability (CNVD-2022-54328)

Microweber is a drag-and-drop online store management system from the US Microweber community. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in versions of Microweber prior to 1.2.21. An attacker could use this vulnerability to execute...

Cross-site Scripting (XSS)

microweber/microweber is vulnerable to cross-site scriptingXSS attacks. The library does not properly sanitize the user input before it outputs to the front end, allowing an attacker to inject and execute malicious javascript via a crafted SVG File...

Cross-Site Scripting (XSS)

microweber/microweber is vulnerable to reflected cross-site scripting. The vulnerability exists in the module function in ApiController.php due to a lack of sanitization in module attributes which allows an attacker to inject and execute malicious payloads...

Microweber Stored Cross-site Scripting before v1.2.20

Microwerber prior to version 1.2.20 is vulnerable to stored Cross-site Scripting XSS...

GHSA-XG72-6C83-GHH4 Microweber Stored Cross-site Scripting before v1.2.20

Microwerber prior to version 1.2.20 is vulnerable to stored Cross-site Scripting XSS...

Microweber before 1.2.21 vulnerable to reflected XSS

Microweber prior to 1.2.21 is vulnerable to reflected cross-site scripting XSS...

GHSA-CFCG-2QGR-V243 Microweber before 1.2.21 vulnerable to reflected XSS

Microweber prior to 1.2.21 is vulnerable to reflected cross-site scripting XSS...

CVE-2022-2470

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...

CVE-2022-2470

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...

Cross site scripting

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...

CVE-2022-2470 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...

CVE-2022-2470 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...

CVE-2022-2470

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...

CVE-2022-2470

CVE-2022-2470 : Microweber before 1.2.21 is vulnerable to reflected XSS. Affected product/component: Microweber (microweber/microweber). Root cause/technical details are not fully described in the provided documents beyond the XSS indication; impact is stated as reflective XSS exposure. Remediati...

CVE-2022-2495

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.21...

CVE-2022-2495

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.21...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.21...

CVE-2022-2495

Microweber (GitHub: microweber/microweber) is affected by a stored Cross-site Scripting (XSS) vulnerability arising in versions prior to 1.2.21. The issue stems from how SVG uploads are handled, allowing stored XSS when users upload SVG files. Multiple sources (CVE-2022-2495 records, CNVD-2022-54...