Total
99 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2023-6832 | 1 Microweber | 1 Microweber | 2024-11-21 | N/A | 4.3 MEDIUM |
Business Logic Errors in GitHub repository microweber/microweber prior to 2.0. | |||||
CVE-2023-6599 | 1 Microweber | 1 Microweber | 2024-11-21 | N/A | 4.3 MEDIUM |
Missing Standardized Error Handling Mechanism in GitHub repository microweber/microweber prior to 2.0. | |||||
CVE-2023-6566 | 1 Microweber | 1 Microweber | 2024-11-21 | N/A | 6.5 MEDIUM |
Business Logic Errors in GitHub repository microweber/microweber prior to 2.0. | |||||
CVE-2023-5976 | 1 Microweber | 1 Microweber | 2024-11-21 | N/A | 4.3 MEDIUM |
Improper Access Control in GitHub repository microweber/microweber prior to 2.0. | |||||
CVE-2023-5861 | 1 Microweber | 1 Microweber | 2024-11-21 | N/A | 4.8 MEDIUM |
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0. | |||||
CVE-2023-5318 | 1 Microweber | 1 Microweber | 2024-11-21 | N/A | 7.5 HIGH |
Use of Hard-coded Credentials in GitHub repository microweber/microweber prior to 2.0. | |||||
CVE-2023-5244 | 1 Microweber | 1 Microweber | 2024-11-21 | N/A | 6.1 MEDIUM |
Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 2.0. | |||||
CVE-2023-49052 | 1 Microweber | 1 Microweber | 2024-11-21 | N/A | 8.8 HIGH |
File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component. | |||||
CVE-2023-48122 | 1 Microweber | 1 Microweber | 2024-11-21 | N/A | 7.5 HIGH |
An issue in microweber v.2.0.1 and fixed in v.2.0.4 allows a remote attacker to obtain sensitive information via the HTTP GET method. | |||||
CVE-2023-47379 | 1 Microweber | 1 Microweber | 2024-11-21 | N/A | 5.4 MEDIUM |
Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting (XSS) via the profile picture file upload functionality. | |||||
CVE-2023-3142 | 1 Microweber | 1 Microweber | 2024-11-21 | N/A | 5.4 MEDIUM |
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0. | |||||
CVE-2023-2240 | 1 Microweber | 1 Microweber | 2024-11-21 | N/A | 8.8 HIGH |
Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4. | |||||
CVE-2023-2239 | 1 Microweber | 1 Microweber | 2024-11-21 | N/A | 6.5 MEDIUM |
Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.3.4. | |||||
CVE-2023-2014 | 1 Microweber | 1 Microweber | 2024-11-21 | N/A | 4.8 MEDIUM |
Cross-site Scripting (XSS) - Generic in GitHub repository microweber/microweber prior to 1.3.3. | |||||
CVE-2023-1881 | 1 Microweber | 1 Microweber | 2024-11-21 | N/A | 5.4 MEDIUM |
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3. | |||||
CVE-2023-1877 | 1 Microweber | 1 Microweber | 2024-11-21 | N/A | 9.8 CRITICAL |
Command Injection in GitHub repository microweber/microweber prior to 1.3.3. | |||||
CVE-2023-1081 | 1 Microweber | 1 Microweber | 2024-11-21 | N/A | 4.8 MEDIUM |
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3. | |||||
CVE-2023-0608 | 1 Microweber | 1 Microweber | 2024-11-21 | N/A | 5.4 MEDIUM |
Cross-site Scripting (XSS) - DOM in GitHub repository microweber/microweber prior to 1.3.2. | |||||
CVE-2022-4732 | 1 Microweber | 1 Microweber | 2024-11-21 | N/A | 7.2 HIGH |
Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2. | |||||
CVE-2022-4647 | 1 Microweber | 1 Microweber | 2024-11-21 | N/A | 6.1 MEDIUM |
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.2. |