3 matches found
Cross-site Scripting (XSS)
microweber/microweber is vulnerable to cross-site scripting XSS. The vulnerability is due to improper input validation due to the last name field in the /projects/profile homepage endpoint allowing injection of malicious scripts...
7.6CVSS5.7AI score0.00595EPSS
SaveExploits1References5Affected Software1
CVE-2025-51504
Microweber CMS 2.0 is vulnerable to Cross Site Scripting XSSin the /projects/profile, homepage endpoint via the last name field...
7.6CVSS6.6AI score
SaveExploits0References5
Microweber CMS security vulnerabilities
Microweber CMS is a drag-and-drop website builder from Microweber Open Source. A security vulnerability exists in Microweber CMS version 2.0, which stems from cross-site scripting in the last name field in the /projects/profile and homepage endpoints...
7.6CVSS5.5AI score0.00595EPSS
SaveExploits1References4
20