Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 118

Export CSV
CVE-2023-6832

Business Logic Errors in microweber/microweber

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2023-6599

Missing Standardized Error Handling Mechanism in microweber/microweber

Missing Standardized Error Handling Mechanism in GitHub repository microweber/microweber prior to 2.0.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2023-6566

Business Logic Errors in microweber/microweber

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2023-5976

Improper Access Control in microweber/microweber

Improper Access Control in GitHub repository microweber/microweber prior to 2.0.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2023-5861

Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2023-5318

Use of Hard-coded Credentials in microweber/microweber

Use of Hard-coded Credentials in GitHub repository microweber/microweber prior to 2.0.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2023-5244

Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 2.0.

CVSS 3.1 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2023-49052

File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component.

CVSS 3.1 · 8.8 High EPSS 2.5% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2023-48122

An issue in microweber v.2.0.1 and fixed in v.2.0.4 allows a remote attacker to obtain sensitive information via the HTTP GET method.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2023-47379

Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting (XSS) via the profile picture file upload functionality.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2023-1081

Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-2777

Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.1.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-2495

Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.21.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-2470

Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.21.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-2353

Cross-Site Request Forgery (CSRF) in microweber/microweber

Prior to microweber/microweber v1.2.20, due to improper neutralization of input, an attacker can steal tokens to perform cross-site request forgery, fetch contents from same-site and redirect a user.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-2300

Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.19.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-2280

Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.19.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-2252

Open Redirect in microweber/microweber

Open Redirect in GitHub repository microweber/microweber prior to 1.2.19.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-2174

Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.18.

CVSS 3.1 · 6.1 Medium EPSS 2.6% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-2130

Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.17.

CVSS 3.1 · 6.1 Medium EPSS 3.1% KEV · Not listed
Vendors
Microweber
Products
Microweber