MI
Product
microweber/microweber
78
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 13Medium 62Low 0
Watch
Add microweber/microweber to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-2495 | 4.8 | Jul 22 | Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.2.21 |
| CVE-2022-0930 | 4.8 | Mar 12 | File upload filter bypass leading to stored XSS in microweber/microweber Affected: before 1.2.12 |
| CVE-2022-0926 | 4.8 | Mar 12 | File upload filter bypass leading to stored XSS in microweber/microweber Affected: before 1.2.12 |
| CVE-2022-0912 | 4.8 | Mar 11 | Unrestricted Upload of File with Dangerous Type in microweber/microweber Affected: before 1.2.11 |
| CVE-2022-0906 | 4.8 | Mar 10 | Unrestricted file upload leads to stored XSS in microweber/microweber Affected: before 1.1.12 |
| CVE-2022-0763 | 4.8 | Feb 26 | Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.3 |
| CVE-2023-6832 | 4.3 | Dec 15 | Business Logic Errors in microweber/microweber Affected: before 2.0 |
| CVE-2023-6599 | 4.3 | Dec 8 | Missing Standardized Error Handling Mechanism in microweber/microweber Affected: before 2.0 |
| CVE-2023-5976 | 4.3 | Nov 7 | Improper Access Control in microweber/microweber Affected: before 2.0 |
| CVE-2022-0762 | 4.3 | Feb 26 | Incorrect Authorization in microweber/microweber Affected: before 1.3 |
| CVE-2022-0638 | 4.3 | Feb 17 | Cross-Site Request Forgery (CSRF) in microweber/microweber Affected: before 1.2.11 |
| CVE-2022-0596 | 4.3 | Feb 15 | Improper Validation of Specified Quantity in Input in microweber/microweber Affected: before 1.2.11 |