microweber/microweber vulnerabilities | LiveThreat CVE Feed

Product

microweber/microweber

by microweber · last CVE Dec 15, 2023

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities78 In the news0 Timeline

Severity mix

Critical 3High 13Medium 62Low 0

Severity

All severities78 Critical3 High13 Medium62 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add microweber/microweber to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-0921	6.7	2%	Mar 11	Abusing Backup/Restore feature to achieve Remote Code Execution in microweber/microweber Affected: before 1.2.12
CVE-2023-6566	6.5	0%	Dec 7	Business Logic Errors in microweber/microweber Affected: before 2.0
CVE-2023-2239	6.5	1%	Apr 22	Exposure of Private Personal Information to an Unauthorized Actor in microweber/microweber Affected: before 1.3.4
CVE-2022-0724	6.5	1%	Feb 23	Insecure Storage of Sensitive Information in microweber/microweber Affected: before 1.3
CVE-2022-0721	6.5	1%	Feb 23	Insertion of Sensitive Information Into Debugging Code in microweber/microweber Affected: before 1.3
CVE-2022-0504	6.5	1%	Feb 8	Generation of Error Message Containing Sensitive Information in microweber/microweber Affected: before 1.2.11
CVE-2022-0505	6.5	1%	Feb 8	Cross-Site Request Forgery (CSRF) in microweber/microweber Affected: before 1.2.11
CVE-2022-0277	6.5	1%	Jan 20	Incorrect Permission Assignment for Critical Resource in microweber/microweber Affected: before 1.2.11
CVE-2023-5244	6.1	1%	Sep 28	Cross-site Scripting (XSS) - Reflected in microweber/microweber Affected: before 2.0
CVE-2022-4647	6.1	1%	Dec 22	Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.3.2
CVE-2022-4617	6.1	1%	Dec 21	Cross-site Scripting (XSS) - Reflected in microweber/microweber Affected: before 1.3.2
CVE-2022-3245	6.1	1%	Sep 20	Code Injection in display of tag title on saving tags in microweber/microweber Affected: before 1.3.2
CVE-2022-3242	6.1	2%	Sep 20	HTML code Injection in template search keyword in microweber/microweber Affected: before 1.3.2
CVE-2022-2470	6.1	1%	Jul 22	Cross-site Scripting (XSS) - Reflected in microweber/microweber Affected: before 1.2.21
CVE-2022-2353	6.1	1%	Jul 9	Cross-Site Request Forgery (CSRF) in microweber/microweber Affected: before 1.2.20
CVE-2022-2252	6.1	1%	Jun 29	Open Redirect in microweber/microweber Affected: before 1.2.19
CVE-2022-2174	6.1	3%	Jun 22	Cross-site Scripting (XSS) - Reflected in microweber/microweber Affected: before 1.2.18
CVE-2022-2130	6.1	3%	Jun 20	Cross-site Scripting (XSS) - Reflected in microweber/microweber Affected: before 1.2.17
CVE-2022-1584	6.1	1%	May 4	Reflected XSS in microweber/microweber Affected: before 1.2.16
CVE-2022-1555	6.1	1%	May 4	DOM XSS in microweber ver 1.2.15 in microweber/microweber Affected: before 1.2.16
CVE-2022-1504	6.1	1%	Apr 27	XSS in /demo/module/?module=HERE in microweber/microweber Affected: before 1.2.15
CVE-2022-1439	6.1	3%	Apr 22	Reflected XSS on demo.microweber.org/demo/module/ in microweber/microweber Affected: before 1.2.15
CVE-2022-0929	6.1	1%	Mar 12	XSS on dynamic_text module in microweber/microweber Affected: before 1.2.11
CVE-2022-0690	6.1	1%	Feb 19	Cross-site Scripting (XSS) - Reflected in microweber/microweber Affected: before 1.2.11
CVE-2022-0678	6.1	2%	Feb 19	Cross-site Scripting (XSS) - Reflected in microweber/microweber Affected: before 1.2.11
CVE-2022-0597	6.1	3%	Feb 15	Open Redirect in microweber/microweber Affected: before 1.2.11
CVE-2022-0560	6.1	1%	Feb 11	Open Redirect in microweber/microweber Affected: before 1.2.11
CVE-2022-0968	5.5	4%	Mar 15	The microweber application allows large characters to insert in the input field "fist & last name" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/microweber in microweber/microweber Affected: before 1.2.12
CVE-2022-0961	5.5	1%	Mar 15	The microweber application allows large characters to insert in the input field "post title" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/microweber Affected: before 1.2.12
CVE-2023-3142	5.4	0%	Jun 7	Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 2.0
CVE-2023-1881	5.4	0%	Apr 5	Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.3.3
CVE-2023-0608	5.4	1%	Feb 1	Cross-site Scripting (XSS) - DOM in microweber/microweber Affected: before 1.3.2
CVE-2022-2777	5.4	0%	Aug 11	Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.3.1
CVE-2022-2300	5.4	1%	Jul 4	Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.2.19
CVE-2022-2280	5.4	1%	Jul 1	Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.2.19
CVE-2022-0963	5.4	2%	Mar 15	Unrestricted XML Files Leads to Stored XSS in microweber/microweber Affected: before 1.2.12
CVE-2022-0954	5.4	3%	Mar 15	Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in microweber/microweber Affected: before 1.2.11
CVE-2022-0928	5.4	2%	Mar 11	Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.2.12
CVE-2022-0723	5.4	1%	Feb 26	Cross-site Scripting (XSS) - Reflected in microweber/microweber Affected: before 1.2.11
CVE-2022-0719	5.4	1%	Feb 23	Cross-site Scripting (XSS) - Reflected in microweber/microweber Affected: before 1.3
CVE-2022-0558	5.4	1%	Feb 10	Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.2.11
CVE-2022-0506	5.4	1%	Feb 8	Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.2.11
CVE-2022-0378	5.4	4%	Jan 26	Cross-site Scripting (XSS) - Reflected in microweber/microweber Affected: before 1.2.11
CVE-2022-0379	5.4	1%	Jan 26	Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.2.11
CVE-2022-0278	5.4	1%	Jan 20	Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.2.11
CVE-2022-0689	5.3	1%	Feb 19	Use multiple time the one-time coupon in microweber/microweber Affected: before 1.2.11
CVE-2022-0688	4.9	1%	Feb 20	Business Logic Errors in microweber/microweber Affected: before 1.2.11
CVE-2023-5861	4.8	0%	Oct 31	Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 2.0
CVE-2023-2014	4.8	0%	Apr 13	Cross-site Scripting (XSS) - Generic in microweber/microweber Affected: before 1.3.3
CVE-2023-1081	4.8	0%	Feb 28	Cross-site Scripting (XSS) - Stored in microweber/microweber Affected: before 1.3.3