Vulnerabilities (CVE)

Filtered by vendor Microweber Subscribe
Filtered by product Microweber
Total 99 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-6832 1 Microweber 1 Microweber 2024-11-21 N/A 4.3 MEDIUM
Business Logic Errors in GitHub repository microweber/microweber prior to 2.0.
CVE-2023-6599 1 Microweber 1 Microweber 2024-11-21 N/A 4.3 MEDIUM
Missing Standardized Error Handling Mechanism in GitHub repository microweber/microweber prior to 2.0.
CVE-2023-6566 1 Microweber 1 Microweber 2024-11-21 N/A 6.5 MEDIUM
Business Logic Errors in GitHub repository microweber/microweber prior to 2.0.
CVE-2023-5976 1 Microweber 1 Microweber 2024-11-21 N/A 4.3 MEDIUM
Improper Access Control in GitHub repository microweber/microweber prior to 2.0.
CVE-2023-5861 1 Microweber 1 Microweber 2024-11-21 N/A 4.8 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0.
CVE-2023-5318 1 Microweber 1 Microweber 2024-11-21 N/A 7.5 HIGH
Use of Hard-coded Credentials in GitHub repository microweber/microweber prior to 2.0.
CVE-2023-5244 1 Microweber 1 Microweber 2024-11-21 N/A 6.1 MEDIUM
Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 2.0.
CVE-2023-49052 1 Microweber 1 Microweber 2024-11-21 N/A 8.8 HIGH
File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component.
CVE-2023-48122 1 Microweber 1 Microweber 2024-11-21 N/A 7.5 HIGH
An issue in microweber v.2.0.1 and fixed in v.2.0.4 allows a remote attacker to obtain sensitive information via the HTTP GET method.
CVE-2023-47379 1 Microweber 1 Microweber 2024-11-21 N/A 5.4 MEDIUM
Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting (XSS) via the profile picture file upload functionality.
CVE-2023-3142 1 Microweber 1 Microweber 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0.
CVE-2023-2240 1 Microweber 1 Microweber 2024-11-21 N/A 8.8 HIGH
Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4.
CVE-2023-2239 1 Microweber 1 Microweber 2024-11-21 N/A 6.5 MEDIUM
Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.3.4.
CVE-2023-2014 1 Microweber 1 Microweber 2024-11-21 N/A 4.8 MEDIUM
Cross-site Scripting (XSS) - Generic in GitHub repository microweber/microweber prior to 1.3.3.
CVE-2023-1881 1 Microweber 1 Microweber 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3.
CVE-2023-1877 1 Microweber 1 Microweber 2024-11-21 N/A 9.8 CRITICAL
Command Injection in GitHub repository microweber/microweber prior to 1.3.3.
CVE-2023-1081 1 Microweber 1 Microweber 2024-11-21 N/A 4.8 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3.
CVE-2023-0608 1 Microweber 1 Microweber 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - DOM in GitHub repository microweber/microweber prior to 1.3.2.
CVE-2022-4732 1 Microweber 1 Microweber 2024-11-21 N/A 7.2 HIGH
Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2.
CVE-2022-4647 1 Microweber 1 Microweber 2024-11-21 N/A 6.1 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.2.