Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 121

Export CSV
CVE-2022-0896

Improper Neutralization of Special Elements Used in a Template Engine in microweber/microweber

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository microweber/microweber prior to 1.3.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-0895

Static Code Injection in microweber/microweber

Static Code Injection in GitHub repository microweber/microweber prior to 1.3.

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-0855

Improper Resolution of Path Equivalence in microweber-dev/whmcs_plugin

Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcs_plugin prior to 0.0.4.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Microweber
Products
Whmcs
CVE-2022-0777

Weak Password Recovery Mechanism for Forgotten Password in microweber/microweber

Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-0763

Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-0724

Insecure Storage of Sensitive Information in microweber/microweber

Insecure Storage of Sensitive Information in GitHub repository microweber/microweber prior to 1.3.

CVSS 3.1 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-0723

Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.11.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-0721

Insertion of Sensitive Information Into Debugging Code in microweber/microweber

Insertion of Sensitive Information Into Debugging Code in GitHub repository microweber/microweber prior to 1.3.

CVSS 3.1 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-0719

Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.3.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-0690

Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.

CVSS 3.1 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-0689

Use multiple time the one-time coupon in microweber/microweber

Use multiple time the one-time coupon in Packagist microweber/microweber prior to 1.2.11.

CVSS 3.1 · 5.3 Medium EPSS 1.0% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-0688

Business Logic Errors in microweber/microweber

Business Logic Errors in Packagist microweber/microweber prior to 1.2.11.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-0678

Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.

CVSS 3.1 · 6.1 Medium EPSS 2.3% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-0666

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in microweber/microweber

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11.

CVSS 3.1 · 7.5 High EPSS 44.3% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-0660

Generation of Error Message Containing Sensitive Information in microweber/microweber

Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11.

CVSS 3.1 · 7.5 High EPSS 6.9% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-0638

Cross-Site Request Forgery (CSRF) in microweber/microweber

Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-0597

Open Redirect in microweber/microweber

Open Redirect in Packagist microweber/microweber prior to 1.2.11.

CVSS 3.1 · 6.1 Medium EPSS 2.6% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-0596

Improper Validation of Specified Quantity in Input in microweber/microweber

Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-0560

Open Redirect in microweber/microweber

Open Redirect in Packagist microweber/microweber prior to 1.2.11.

CVSS 3.1 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Microweber
Products
Microweber
CVE-2022-0558

Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Microweber
Products
Microweber