1398 matches found
CVE-2022-0930
CVE-2022-0930 affects microweber/microweber. The issue is a file upload filter bypass that allows stored XSS via uploaded HTML-like files, reported for versions prior to 1.2.12. The root cause is inadequate validation/filtration of uploads enabling JavaScript execution on access. Remediation per ...
CVE-2022-0930 File upload filter bypass leading to stored XSS in microweber/microweber
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0930 File upload filter bypass leading to stored XSS in microweber/microweber
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0929
XSS on dynamictext module in GitHub repository microweber/microweber prior to 1.2.11...
CVE-2022-0929
XSS on dynamictext module in GitHub repository microweber/microweber prior to 1.2.11...
Cross site scripting
XSS on dynamictext module in GitHub repository microweber/microweber prior to 1.2.11...
CVE-2022-0929 XSS on dynamic_text module in microweber/microweber
XSS on dynamictext module in GitHub repository microweber/microweber prior to 1.2.11...
CVE-2022-0929 XSS on dynamic_text module in microweber/microweber
XSS on dynamictext module in GitHub repository microweber/microweber prior to 1.2.11...
CVE-2022-0929
The CVE-2022-0929 issue affects microweber/microweber, specifically the dynamic_text module. Reported as a cross-site scripting (XSS) vulnerability in the dynamic_text component, with vulnerable versions noted as prior to 1.2.11 (and related advisories referencing up to 1.2.12). The root cause is...
CVE-2022-0926
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0926
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...
Unrestricted file upload
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0926
The CVE-2022-0926 entry concerns Microweber (microweber/microweber). A vulnerability in the file upload filter allows bypassing input validation, leading to stored XSS. Affected version range: prior to 1.2.12. The root cause is improper validation in the file upload handling, enabling injection o...
CVE-2022-0926 File upload filter bypass leading to stored XSS in microweber/microweber
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0926 File upload filter bypass leading to stored XSS in microweber/microweber
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...
GHSA-C383-Q5VF-HX55 Integer Overflow or Wraparound in Microweber
Microweber prior to 1.2.12 is vulnerable to Integer Overflow or Wraparound...
Integer Overflow or Wraparound in Microweber
Microweber prior to 1.2.12 is vulnerable to Integer Overflow or Wraparound...
Cross-site Scripting in microweber
Microweber drag and drop website builder and CMS with e-commerce. Cross-site Scripting XSS discovered in microweber prior to 1.2.12. There is currently no known workaround, users are recommended to update to version 1.2.12...
GHSA-JJP3-M93H-5JM4 Cross-site Scripting in microweber
Microweber drag and drop website builder and CMS with e-commerce. Cross-site Scripting XSS discovered in microweber prior to 1.2.12. There is currently no known workaround, users are recommended to update to version 1.2.12...