Login Request a demo
MI
Product
microweber
by microweber · last CVE Aug 3, 2026
119
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities119In the news0Timeline
Severity mix
Critical 4High 29Medium 84Low 0
Severity
All severities119Critical4High29Medium84Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add microweber to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-5244
6.1
1%
Sep 28
Cross-site Scripting (XSS) - Reflected in microweber/microweber
Affected: before 2.0
CVE-2021-32857
6.1
1%
Feb 20
Cockpit vulnerable to Cross-site Scripting
Affected: 0.12.2 through 0.12.2
CVE-2021-32856
6.1
1%
Feb 20
Microweber vulnerable to Cross-site Scripting
Affected: 1.2.12 through 1.2.12
CVE-2022-4647
6.1
1%
Dec 22
Cross-site Scripting (XSS) - Stored in microweber/microweber
Affected: through 1.3.1
CVE-2022-4617
6.1
1%
Dec 21
Cross-site Scripting (XSS) - Reflected in microweber/microweber
Affected: through 1.3.1
CVE-2022-0698
6.1
1%
Nov 25
Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter
Affected: 1.3.1
CVE-2022-3245
6.1
1%
Sep 20
Code Injection in display of tag title on saving tags in microweber/microweber
Affected: before 1.3.2
CVE-2022-3242
6.1
2%
Sep 20
HTML code Injection in template search keyword in microweber/microweber
Affected: before 1.3.2
CVE-2022-2470
6.1
1%
Jul 22
Cross-site Scripting (XSS) - Reflected in microweber/microweber
Affected: before 1.2.21
CVE-2022-2353
6.1
1%
Jul 9
Cross-Site Request Forgery (CSRF) in microweber/microweber
Affected: before 1.2.20
CVE-2022-2252
6.1
1%
Jun 29
Open Redirect in microweber/microweber
Affected: before 1.2.19
CVE-2022-2174
6.1
3%
Jun 22
Cross-site Scripting (XSS) - Reflected in microweber/microweber
Affected: before 1.2.18
CVE-2022-2130
6.1
3%
Jun 20
Cross-site Scripting (XSS) - Reflected in microweber/microweber
Affected: before 1.2.17
CVE-2022-1584
6.1
1%
May 4
Reflected XSS in microweber/microweber
Affected: before 1.2.16
CVE-2022-1555
6.1
1%
May 4
DOM XSS in microweber ver 1.2.15 in microweber/microweber
Affected: before 1.2.16
CVE-2022-1504
6.1
1%
Apr 27
XSS in /demo/module/?module=HERE in microweber/microweber
Affected: before 1.2.15
CVE-2022-1439
6.1
3%
Apr 22
Reflected XSS on demo.microweber.org/demo/module/ in microweber/microweber
Affected: before 1.2.15
CVE-2022-0929
6.1
1%
Mar 12
XSS on dynamic_text module in microweber/microweber
Affected: before 1.2.11
CVE-2022-0690
6.1
1%
Feb 19
Cross-site Scripting (XSS) - Reflected in microweber/microweber
Affected: before 1.2.11
CVE-2022-0678
6.1
2%
Feb 19
Cross-site Scripting (XSS) - Reflected in microweber/microweber
Affected: before 1.2.11
CVE-2022-0597
6.1
3%
Feb 15
Open Redirect in microweber/microweber
Affected: before 1.2.11
CVE-2022-0560
6.1
1%
Feb 11
Open Redirect in microweber/microweber
Affected: before 1.2.11
CVE-2021-33988
6.1
1%
Oct 19
Cross Site Scripting (XSS)
Affected: 1.2.7
CVE-2018-19917
6.1
2%
Mar 17
Microweber 1.0.8 has reflected cross-site scripting (XSS) vulnerabilities
Affected: 1.0.8
CVE-2018-1000826
6.1
1%
Dec 20
Microweber version <= 1.0.7 contains a Cross Site Scripting (XSS) vulnerability in Admin login form template that can result in Execution of JavaScript code
Affected: through 1.0.7
CVE-2022-0968
5.5
4%
Mar 15
The microweber application allows large characters to insert in the input field "fist & last name" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/microweber in microweber/microweber
Affected: before 1.2.12
CVE-2022-0961
5.5
1%
Mar 15
The microweber application allows large characters to insert in the input field "post title" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/microweber
Affected: before 1.2.12
CVE-2020-23139
5.5
0%
Nov 9
Microweber 1.1.18 is affected by broken authentication and session management
Affected: 1.1.18
CVE-2020-23136
5.5
0%
Nov 9
Microweber v1.1.18 is affected by no session expiry after log-out
Affected: 1.1.18
CVE-2024-58289
5.4
0%
Dec 11
Microweber 2.0.15 Stored Cross-Site Scripting via User Profile Fields
Affected: 2.0.15
CVE-2023-47379
5.4
1%
Nov 8
Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting (XSS) via the profile picture file upload functionality
Affected: 2.0.1
CVE-2023-3142
5.4
0%
Jun 7
Cross-site Scripting (XSS) - Stored in microweber/microweber
Affected: before 2.0
CVE-2023-1881
5.4
0%
Apr 5
Cross-site Scripting (XSS) - Stored in microweber/microweber
Affected: before 1.3.3
CVE-2023-0608
5.4
1%
Feb 1
Cross-site Scripting (XSS) - DOM in microweber/microweber
Affected: before 1.3.2
CVE-2022-2777
5.4
0%
Aug 11
Cross-site Scripting (XSS) - Stored in microweber/microweber
Affected: before 1.3.1
CVE-2022-2300
5.4
1%
Jul 4
Cross-site Scripting (XSS) - Stored in microweber/microweber
Affected: before 1.2.19
CVE-2022-2280
5.4
1%
Jul 1
Cross-site Scripting (XSS) - Stored in microweber/microweber
Affected: before 1.2.19
CVE-2022-0963
5.4
2%
Mar 15
Unrestricted XML Files Leads to Stored XSS in microweber/microweber
Affected: before 1.2.12
CVE-2022-0954
5.4
3%
Mar 15
Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in microweber/microweber
Affected: before 1.2.11
CVE-2022-0928
5.4
2%
Mar 11
Cross-site Scripting (XSS) - Stored in microweber/microweber
Affected: through 1.2.11
CVE-2022-0723
5.4
1%
Feb 26
Cross-site Scripting (XSS) - Reflected in microweber/microweber
Affected: before 1.2.11
CVE-2022-0719
5.4
1%
Feb 23
Cross-site Scripting (XSS) - Reflected in microweber/microweber
Affected: before 1.3
CVE-2022-0558
5.4
1%
Feb 10
Cross-site Scripting (XSS) - Stored in microweber/microweber
Affected: before 1.2.11
CVE-2022-0506
5.4
1%
Feb 8
Cross-site Scripting (XSS) - Stored in microweber/microweber
Affected: before 1.2.11
CVE-2022-0378
5.4
4%
Jan 26
Cross-site Scripting (XSS) - Reflected in microweber/microweber
Affected: before 1.2.11
CVE-2022-0379
5.4
1%
Jan 26
Cross-site Scripting (XSS) - Stored in microweber/microweber
Affected: before 1.2.11
CVE-2022-0278
5.4
1%
Jan 20
Cross-site Scripting (XSS) - Stored in microweber/microweber
Affected: before 1.2.11
CVE-2022-0689
5.3
1%
Feb 19
Use multiple time the one-time coupon in microweber/microweber
Affected: before 1.2.11
CVE-2022-0688
4.9
1%
Feb 20
Business Logic Errors in microweber/microweber
Affected: before 1.2.11
CVE-2026-67617
4.8
0%
Aug 3
Microweber CMS 2.0.20 Stored XSS via tag_names Parameter
Affected: through 2.0.20
Page 2 of 3 · 119 total
123