CVE-2025-60954

Microweber CMS 2.0 has Weak Password Requirements. The application does not enforce minimum password length or complexity during password resets. Users can set extremely weak passwords, including single-character passwords, which can lead to account compromise, including administrative accounts...

CVE-2025-60954

Microweber CMS 2.0 is vulnerable to Weak Password Requirements (CWE-521) within the password reset process. The application fails to enforce minimum password length or complexity, allowing users to set extremely weak passwords, such as single-character strings. This flaw can lead to account compr...

CVE-2025-60954

Microweber CMS 2.0 has Weak Password Requirements. The application does not enforce minimum password length or complexity during password resets. Users can set extremely weak passwords, including single-character passwords, which can lead to account compromise, including administrative accounts...