Microweber: >> Microweber Security Vulnerabilities
Business Logic Errors in GitHub repository microweber/microweber prior to 2.0.
CVSS Score
5.9
EPSS Score
0.001
Published
2023-12-07
File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component.
CVSS Score
8.8
EPSS Score
0.217
Published
2023-11-30
Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting (XSS) via the profile picture file upload functionality.
CVSS Score
5.4
EPSS Score
0.002
Published
2023-11-08
Improper Access Control in GitHub repository microweber/microweber prior to 2.0.
CVSS Score
4.6
EPSS Score
0.001
Published
2023-11-07
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0.
CVSS Score
6.4
EPSS Score
0.001
Published
2023-10-31
Use of Hard-coded Credentials in GitHub repository microweber/microweber prior to 2.0.
CVSS Score
5.8
EPSS Score
0.003
Published
2023-09-30
Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 2.0.
CVSS Score
5.0
EPSS Score
0.259
Published
2023-09-28
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0.
CVSS Score
3.8
EPSS Score
0.0
Published
2023-06-07
Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.3.4.
CVSS Score
7.1
EPSS Score
0.001
Published
2023-04-22
Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4.
CVSS Score
8.8
EPSS Score
0.001
Published
2023-04-22