microweber/microweber vulnerabilities | LiveThreat CVE Feed

Product

microweber/microweber

by microweber · last CVE Dec 15, 2023

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities78 In the news0 Timeline

Severity mix

Critical 3High 13Medium 62Low 0

Severity

All severities78 Critical3 High13 Medium62 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add microweber/microweber to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-2280	5.4	1%	Jul 1	Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.2.19
CVE-2022-0963	5.4	2%	Mar 15	Unrestricted XML Files Leads to Stored XSS in microweber/microweber Affected: before 1.2.12
CVE-2022-0954	5.4	3%	Mar 15	Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in microweber/microweber Affected: before 1.2.11
CVE-2022-0928	5.4	2%	Mar 11	Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.2.12
CVE-2022-0723	5.4	1%	Feb 26	Cross-site Scripting (XSS) - Reflected in microweber/microweber Affected: before 1.2.11
CVE-2022-0719	5.4	1%	Feb 23	Cross-site Scripting (XSS) - Reflected in microweber/microweber Affected: before 1.3
CVE-2022-0558	5.4	1%	Feb 10	Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.2.11
CVE-2022-0506	5.4	1%	Feb 8	Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.2.11
CVE-2022-0378	5.4	4%	Jan 26	Cross-site Scripting (XSS) - Reflected in microweber/microweber Affected: before 1.2.11
CVE-2022-0379	5.4	1%	Jan 26	Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.2.11
CVE-2022-0278	5.4	1%	Jan 20	Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.2.11
CVE-2022-0689	5.3	1%	Feb 19	Use multiple time the one-time coupon in microweber/microweber Affected: before 1.2.11
CVE-2022-0688	4.9	1%	Feb 20	Business Logic Errors in microweber/microweber Affected: before 1.2.11
CVE-2023-5861	4.8	0%	Oct 31	Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 2.0
CVE-2023-2014	4.8	0%	Apr 13	Cross-site Scripting (XSS) - Generic in microweber/microweber Affected: before 1.3.3
CVE-2023-1081	4.8	0%	Feb 28	Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.3.3
CVE-2022-2495	4.8	1%	Jul 22	Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.2.21
CVE-2022-0930	4.8	1%	Mar 12	File upload filter bypass leading to stored XSS in microweber/microweber Affected: before 1.2.12
CVE-2022-0926	4.8	1%	Mar 12	File upload filter bypass leading to stored XSS in microweber/microweber Affected: before 1.2.12
CVE-2022-0912	4.8	1%	Mar 11	Unrestricted Upload of File with Dangerous Type in microweber/microweber Affected: before 1.2.11
CVE-2022-0906	4.8	1%	Mar 10	Unrestricted file upload leads to stored XSS in microweber/microweber Affected: before 1.1.12
CVE-2022-0763	4.8	1%	Feb 26	Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.3
CVE-2023-6832	4.3	1%	Dec 15	Business Logic Errors in microweber/microweber Affected: before 2.0
CVE-2023-6599	4.3	0%	Dec 8	Missing Standardized Error Handling Mechanism in microweber/microweber Affected: before 2.0
CVE-2023-5976	4.3	0%	Nov 7	Improper Access Control in microweber/microweber Affected: before 2.0
CVE-2022-0762	4.3	1%	Feb 26	Incorrect Authorization in microweber/microweber Affected: before 1.3
CVE-2022-0638	4.3	0%	Feb 17	Cross-Site Request Forgery (CSRF) in microweber/microweber Affected: before 1.2.11
CVE-2022-0596	4.3	1%	Feb 15	Improper Validation of Specified Quantity in Input in microweber/microweber Affected: before 1.2.11