Total
108 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-5976 | 1 Microweber | 1 Microweber | 2023-11-14 | N/A | 4.3 MEDIUM |
| Improper Access Control in GitHub repository microweber/microweber prior to 2.0. | |||||
| CVE-2023-5861 | 1 Microweber | 1 Microweber | 2023-11-08 | N/A | 4.8 MEDIUM |
| Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0. | |||||
| CVE-2022-0762 | 1 Microweber | 1 Microweber | 2023-08-02 | 4.0 MEDIUM | 4.3 MEDIUM |
| Incorrect Authorization in GitHub repository microweber/microweber prior to 1.3. | |||||
| CVE-2022-0282 | 1 Microweber | 1 Microweber | 2023-08-02 | 5.0 MEDIUM | 7.5 HIGH |
| Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11. | |||||
| CVE-2022-0895 | 1 Microweber | 1 Microweber | 2023-07-21 | 7.5 HIGH | 9.8 CRITICAL |
| Static Code Injection in GitHub repository microweber/microweber prior to 1.3. | |||||
| CVE-2022-2368 | 1 Microweber | 1 Microweber | 2023-07-10 | 7.5 HIGH | 9.8 CRITICAL |
| Authentication Bypass by Spoofing in GitHub repository microweber/microweber prior to 1.2.20. | |||||
| CVE-2022-2353 | 1 Microweber | 1 Microweber | 2023-07-06 | 4.3 MEDIUM | 6.1 MEDIUM |
| Prior to microweber/microweber v1.2.20, due to improper neutralization of input, an attacker can steal tokens to perform cross-site request forgery, fetch contents from same-site and redirect a user. | |||||
| CVE-2022-0596 | 1 Microweber | 1 Microweber | 2023-06-29 | 4.0 MEDIUM | 4.3 MEDIUM |
| Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11. | |||||
| CVE-2022-0277 | 1 Microweber | 1 Microweber | 2023-06-29 | 4.0 MEDIUM | 6.5 MEDIUM |
| Incorrect Permission Assignment for Critical Resource in Packagist microweber/microweber prior to 1.2.11. | |||||
| CVE-2023-3142 | 1 Microweber | 1 Microweber | 2023-06-14 | N/A | 5.4 MEDIUM |
| Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0. | |||||
| CVE-2023-2240 | 1 Microweber | 1 Microweber | 2023-05-02 | N/A | 8.8 HIGH |
| Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4. | |||||
| CVE-2023-2239 | 1 Microweber | 1 Microweber | 2023-04-28 | N/A | 6.5 MEDIUM |
| Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.3.4. | |||||
| CVE-2023-2014 | 1 Microweber | 1 Microweber | 2023-04-21 | N/A | 4.8 MEDIUM |
| Cross-site Scripting (XSS) - Generic in GitHub repository microweber/microweber prior to 1.3.3. | |||||
| CVE-2023-1877 | 1 Microweber | 1 Microweber | 2023-04-11 | N/A | 9.8 CRITICAL |
| Command Injection in GitHub repository microweber/microweber prior to 1.3.3. | |||||
| CVE-2023-1881 | 1 Microweber | 1 Microweber | 2023-04-11 | N/A | 5.4 MEDIUM |
| Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3. | |||||
| CVE-2023-1081 | 1 Microweber | 1 Microweber | 2023-03-04 | N/A | 4.8 MEDIUM |
| Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3. | |||||
| CVE-2021-32856 | 1 Microweber | 1 Microweber | 2023-03-02 | N/A | 6.1 MEDIUM |
| Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting (XSS). For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted in versions 1.2.9 and 1.2.12, but it is incomplete. | |||||
| CVE-2023-0608 | 1 Microweber | 1 Microweber | 2023-02-08 | N/A | 5.4 MEDIUM |
| Cross-site Scripting (XSS) - DOM in GitHub repository microweber/microweber prior to 1.3.2. | |||||
| CVE-2022-4732 | 1 Microweber | 1 Microweber | 2023-01-05 | N/A | 7.2 HIGH |
| Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2. | |||||
| CVE-2022-4647 | 1 Microweber | 1 Microweber | 2022-12-24 | N/A | 6.1 MEDIUM |
| Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.2. | |||||