MI
Product
microweber
119
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 29Medium 84Low 0
Watch
Add microweber to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-0608 | 5.4 | Feb 1 | Cross-site Scripting (XSS) - DOM in microweber/microweber Affected: before 1.3.2 |
| CVE-2022-2777 | 5.4 | Aug 11 | Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.3.1 |
| CVE-2022-2300 | 5.4 | Jul 4 | Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.2.19 |
| CVE-2022-2280 | 5.4 | Jul 1 | Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.2.19 |
| CVE-2022-0963 | 5.4 | Mar 15 | Unrestricted XML Files Leads to Stored XSS in microweber/microweber Affected: before 1.2.12 |
| CVE-2022-0954 | 5.4 | Mar 15 | Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in microweber/microweber Affected: before 1.2.11 |
| CVE-2022-0928 | 5.4 | Mar 11 | Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: through 1.2.11 |
| CVE-2022-0723 | 5.4 | Feb 26 | Cross-site Scripting (XSS) - Reflected in microweber/microweber Affected: before 1.2.11 |
| CVE-2022-0719 | 5.4 | Feb 23 | Cross-site Scripting (XSS) - Reflected in microweber/microweber Affected: before 1.3 |
| CVE-2022-0558 | 5.4 | Feb 10 | Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.2.11 |
| CVE-2022-0506 | 5.4 | Feb 8 | Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.2.11 |
| CVE-2022-0378 | 5.4 | Jan 26 | Cross-site Scripting (XSS) - Reflected in microweber/microweber Affected: before 1.2.11 |
| CVE-2022-0379 | 5.4 | Jan 26 | Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.2.11 |
| CVE-2022-0278 | 5.4 | Jan 20 | Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.2.11 |
| CVE-2022-0689 | 5.3 | Feb 19 | Use multiple time the one-time coupon in microweber/microweber Affected: before 1.2.11 |
| CVE-2022-0688 | 4.9 | Feb 20 | Business Logic Errors in microweber/microweber Affected: before 1.2.11 |
| CVE-2026-67617 | 4.8 | Aug 3 | Microweber CMS 2.0.20 Stored XSS via tag_names Parameter Affected: through 2.0.20 |
| CVE-2023-5861 | 4.8 | Oct 31 | Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 2.0.0 |
| CVE-2023-2014 | 4.8 | Apr 13 | Cross-site Scripting (XSS) - Generic in microweber/microweber Affected: before 1.3.3 |
| CVE-2023-1081 | 4.8 | Feb 28 | Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: through 1.3.2 |
| CVE-2022-2495 | 4.8 | Jul 22 | Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.2.21 |
| CVE-2022-0930 | 4.8 | Mar 12 | File upload filter bypass leading to stored XSS in microweber/microweber Affected: before 1.2.12 |
| CVE-2022-0926 | 4.8 | Mar 12 | File upload filter bypass leading to stored XSS in microweber/microweber Affected: before 1.2.12 |
| CVE-2022-0912 | 4.8 | Mar 11 | Unrestricted Upload of File with Dangerous Type in microweber/microweber Affected: before 1.2.11 |
| CVE-2022-0906 | 4.8 | Mar 10 | Unrestricted file upload leads to stored XSS in microweber/microweber Affected: before 1.1.2 |
| CVE-2022-0763 | 4.8 | Feb 26 | Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.3 |
| CVE-2024-33297 | 4.7 | Jan 10 | Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the campaign Name (Internal Name) field in the Add new campaign… Affected: through 2.0.9 |
| CVE-2024-33299 | 4.7 | Jan 10 | Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Name and Last Name parameters in the endpoint… Affected: through 2.0.9 |
| CVE-2023-6832 | 4.3 | Dec 15 | Business Logic Errors in microweber/microweber Affected: before 2.0 |
| CVE-2023-6599 | 4.3 | Dec 8 | Missing Standardized Error Handling Mechanism in microweber/microweber Affected: before 2.0.0 |
| CVE-2023-5976 | 4.3 | Nov 7 | Improper Access Control in microweber/microweber Affected: before 2.0.0 |
| CVE-2022-0762 | 4.3 | Feb 26 | Incorrect Authorization in microweber/microweber Affected: before 1.3 |
| CVE-2022-0638 | 4.3 | Feb 17 | Cross-Site Request Forgery (CSRF) in microweber/microweber Affected: before 1.2.11 |
| CVE-2022-0596 | 4.3 | Feb 15 | Improper Validation of Specified Quantity in Input in microweber/microweber Affected: before 1.2.11 |