CVE-2022-0285 Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting XSS - Stored in Packagist pimcore/pimcore prior to 10.2.9...

CVE-2022-0285

CVE-2022-0285 describes a stored XSS in pimcore/pimcore before version 10.2.9 due to improper validation of client-side data. Affected product: pimcore/pimcore; vulnerability type: Cross-site Scripting (XSS); root cause: lack of proper validation in the WEB application. Impact is cross-site scrip...

CVE-2022-0285 Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting XSS - Stored in Packagist pimcore/pimcore prior to 10.2.9...

CVE-2022-0282

Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11...

Cross site scripting

Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0282

CVE-2022-0282 affects microweber/microweber prior to version 1.2.11, with a Cross-site Scripting vulnerability described as arising from inadequate filtering of externally entered data during code-segment construction. Impact as described is exploitation of XSS; no exploit details are provided in...

CVE-2022-0282 Cross-site Scripting in microweber/microweber

Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0281

Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11...

Information disclosure

Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0281

CVE-2022-0281 affects Microweber (microweber/microweber) prior to 1.2.11, allowing exposure of sensitive information to an unauthorized actor. The Nuclei template and related sources describe an information-disclosure vulnerability with potential data exposure. Remediation is to apply the vendor ...

CVE-2022-0281 Exposure of Sensitive Information to an Unauthorized Actor in microweber/microweber

Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0281 Exposure of Sensitive Information to an Unauthorized Actor in microweber/microweber

Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0277

Incorrect Permission Assignment for Critical Resource in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0277

Incorrect Permission Assignment for Critical Resource in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0278

Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0278

Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...

Cross site scripting

Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...

Design/Logic Flaw

Incorrect Permission Assignment for Critical Resource in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0278 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0278

CVE-2022-0278 is a stored XSS vulnerability in microweber/microweber (Packagist) prior to version 1.2.11. The issue arises from insufficient input validation/output handling, enabling attacker-supplied data to execute JavaScript in a victim’s browser. Multiple sources corroborate the description ...