Microweber: >> Microweber >> 0.951 Security Vulnerabilities
Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 2.0.
CVSS Score
5.0
EPSS Score
0.259
Published
2023-09-28
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0.
CVSS Score
3.8
EPSS Score
0.0
Published
2023-06-07
Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.3.4.
CVSS Score
7.1
EPSS Score
0.001
Published
2023-04-22
Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4.
CVSS Score
8.8
EPSS Score
0.001
Published
2023-04-22
Cross-site Scripting (XSS) - Generic in GitHub repository microweber/microweber prior to 1.3.3.
CVSS Score
5.3
EPSS Score
0.001
Published
2023-04-13
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3.
CVSS Score
7.4
EPSS Score
0.001
Published
2023-04-05
Command Injection in GitHub repository microweber/microweber prior to 1.3.3.
CVSS Score
6.1
EPSS Score
0.005
Published
2023-04-05
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3.
CVSS Score
5.7
EPSS Score
0.001
Published
2023-02-28
Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting (XSS). For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted in versions 1.2.9 and 1.2.12, but it is incomplete.
CVSS Score
6.1
EPSS Score
0.009
Published
2023-02-21
Cross-site Scripting (XSS) - DOM in GitHub repository microweber/microweber prior to 1.3.2.
CVSS Score
6.3
EPSS Score
0.001
Published
2023-02-01