Microweber: Security Vulnerabilities
Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.
CVSS Score
8.8
EPSS Score
0.009
Published
2022-02-19
Use multiple time the one-time coupon in Packagist microweber/microweber prior to 1.2.11.
CVSS Score
5.3
EPSS Score
0.003
Published
2022-02-19
Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.
CVSS Score
6.5
EPSS Score
0.012
Published
2022-02-19
CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11.
CVSS Score
7.6
EPSS Score
0.289
Published
2022-02-18
Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11.
CVSS Score
9.4
EPSS Score
0.075
Published
2022-02-18
Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11.
CVSS Score
4.3
EPSS Score
0.001
Published
2022-02-17
Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11.
CVSS Score
5.4
EPSS Score
0.003
Published
2022-02-15
Open Redirect in Packagist microweber/microweber prior to 1.2.11.
CVSS Score
4.3
EPSS Score
0.01
Published
2022-02-15
Open Redirect in Packagist microweber/microweber prior to 1.2.11.
CVSS Score
4.3
EPSS Score
0.004
Published
2022-02-11
OS Command Injection in Packagist microweber/microweber prior to 1.2.11.
CVSS Score
8.1
EPSS Score
0.141
Published
2022-02-11