Microweber: Security Vulnerabilities
Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in GitHub repository microweber/microweber prior to 1.2.11.
CVSS Score
6.8
EPSS Score
0.058
Published
2022-03-15
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12.
CVSS Score
8.0
EPSS Score
0.005
Published
2022-03-12
XSS on dynamic_text module in GitHub repository microweber/microweber prior to 1.2.11.
CVSS Score
6.8
EPSS Score
0.006
Published
2022-03-12
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12.
CVSS Score
7.1
EPSS Score
0.002
Published
2022-03-12
Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12.
CVSS Score
7.2
EPSS Score
0.046
Published
2022-03-11
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.12.
CVSS Score
6.8
EPSS Score
0.047
Published
2022-03-11
Integer Overflow or Wraparound in GitHub repository microweber/microweber prior to 1.3.
CVSS Score
9.1
EPSS Score
0.008
Published
2022-03-11
Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.2.11.
CVSS Score
4.8
EPSS Score
0.002
Published
2022-03-11
Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12.
CVSS Score
4.3
EPSS Score
0.002
Published
2022-03-10
Static Code Injection in GitHub repository microweber/microweber prior to 1.3.
CVSS Score
7.7
EPSS Score
0.012
Published
2022-03-10