1712 matches found
CVE-2022-2353: Cross-Site Request Forgery (CSRF)
Prior to microweber/microweber v1.2.20, due to improper neutralization of input, an attacker can steal tokens to perform cross-site request forgery, fetch contents from same-site and redirect a user...
PT-2022-16055 · Unknown · Microweber
Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.2.20 Description: The issue is due to improper neutralization of input, allowing an attacker to steal tokens and perform cross-site request forgery, fetch contents from the same site, and redirect a...
Cross-site Scripting (XSS)
microweber/microweber is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization of input allowing an attacker to inject maliciously crafted script into the system via HTTP request...
Cross-site Scripting in microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
GHSA-Q6MP-562X-GGVV Cross-site Scripting in microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
CVE-2022-2300
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
CVE-2022-2300
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
CVE-2022-2300 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
CVE-2022-2300
CVE-2022-2300 affects microweber/microweber with a Stored XSS in versions prior to 1.2.19. Multiple sources (NVD/huntr/Veracode OSV/GHSA) describe a lack of input sanitization as the underlying issue, enabling attacker-supplied script via HTTP requests. Impact described in CVSS notes is Low to Lo...
CVE-2022-2300 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
CVE-2022-2300
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
Cross-Site Scripting (XSS)
microweber/microweber is vulnerable to stored cross-site scripting. The vulnerability exists in plupload.php because SVG content is not properly sanitized which allows an attacker to inject and execute malicious javascript on the users who will open the link of the SVG file...
CVE-2022-2300: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
PT-2022-3807
Name of the Vulnerable Software and Affected Versions microweber/microweber versions prior to 1.2.19 Description The issue is related to a Cross-site Scripting XSS - Stored vulnerability. It exists due to inadequate protection of the web page structure, allowing a remote attacker to conduct an XS...
Microweber 跨站脚本漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 1.2.19. An...
Cross-site Scripting in microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...
GHSA-5PG2-QG87-VMJ7 Cross-site Scripting in microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...