MI
Vendor
microweber
200
CVEs
0
On KEV
0
New 30D
Products
MI9.8
microweber
microweber
119 CVEs0 on KEV0 new
MI9.8
microweber/microweber
microweber
78 CVEs0 on KEV0 new
AP8.4
Administration panel
Microweber
2 CVEs0 on KEV0 new
WH6.1
Whmcs
Microweber
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-5696 | AP Administration panel Microweber | 5.9 | Sep 23 | Multiple vulnerabilities in the Microweber administration panel |
| CVE-2026-5695 | AP Administration panel Microweber | 8.4 | Sep 23 | Multiple vulnerabilities in the Microweber administration panel |
| CVE-2026-67617 | MI microweber microweber | 4.8 | Aug 3 | Microweber CMS 2.0.20 Stored XSS via tag_names Parameter |
| CVE-2026-65693 | MI microweber microweber | 7.2 | Jul 24 | Microweber CMS 2.0.20 Server-Side Template Injection via Mail Templates |
| CVE-2026-65694 | MI microweber microweber | 7.5 | Jul 23 | Microweber CMS 2.0.20 Path Traversal via ServeStaticFileController |
| CVE-2026-12198 | MI Microweber Microweber | 7.3 | Jun 15 | Microweber API Endpoint thumbnail_img userfiles_path path traversal |
| CVE-2025-70792 | MI Microweber Microweber | 6.1 | Feb 5 | Cross Site Scripting vulnerability in the "/admin/category/create" endpoint of Microweber 2.0.19 |
| CVE-2025-70791 | MI Microweber Microweber | 6.1 | Feb 5 | Cross Site Scripting vulnerability in the "/admin/order/abandoned" endpoint of Microweber 2.0.19 |
| CVE-2024-58289 | MI Microweber microweber | 5.4 | Dec 11 | Microweber 2.0.15 Stored Cross-Site Scripting via User Profile Fields |
| CVE-2025-60954 | MI Microweber Microweber | 8.3 | Oct 24 | Microweber CMS 2.0 has Weak Password Requirements |
| CVE-2025-51501 | MI Microweber Microweber | 6.1 | Aug 1 | Reflected Cross-Site Scripting (XSS) in the id parameter of the live_edit.module_settings API endpoint in Microweber CMS2.0 allows execution of arbitrary JavaScript |
| CVE-2025-51502 | MI Microweber Microweber | 6.1 | Aug 1 | Reflected Cross-Site Scripting (XSS) in Microweber CMS 2.0 via the layout parameter on the /admin/page/create page allows arbitrary JavaScript execution in the context of… |
| CVE-2025-51504 | MI Microweber Microweber | 7.6 | Aug 1 | Microweber CMS 2.0 is vulnerable to Cross Site Scripting (XSS)in the /projects/profile, homepage endpoint via the last name field |
| CVE-2025-51503 | MI Microweber Microweber | 7.6 | Jul 31 | A Stored Cross-Site Scripting (XSS) vulnerability in Microweber CMS 2.0 allows attackers to inject malicious scripts into user profile fields, leading to arbitrary JavaScript… |
| CVE-2025-34076 | MI Microweber Microweber | 7.2 | Jul 2 | Microweber CMS Authenticated Local File Inclusion via Backup API |
| CVE-2025-2214 | MI Microweber Microweber | 6.1 | Mar 11 | Microweber Settings index.php cross site scripting |
| CVE-2024-33298 | MI Microweber Microweber | 6.1 | Jan 10 | Microweber Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the create new backup function in the endpoint… |
| CVE-2024-33297 | MI Microweber Microweber | 4.7 | Jan 10 | Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the campaign Name (Internal Name) field in the Add new campaign… |
| CVE-2024-33299 | MI Microweber Microweber | 4.7 | Jan 10 | Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Name and Last Name parameters in the endpoint… |
| CVE-2024-40101 | MI Microweber Microweber | 6.1 | Aug 6 | A Reflected Cross-site scripting (XSS) vulnerability exists in '/search' in microweber 2.0.15 and earlier allowing unauthenticated remote attackers to inject arbitrary web script… |
| CVE-2024-41381 | MI Microweber Microweber | 6.1 | Aug 5 | microweber 2.0.16 was discovered to contain a Cross Site Scripting (XSS) vulnerability via userfiles\modules\settings\admin.php |
| CVE-2024-41380 | MI Microweber Microweber | 6.1 | Aug 5 | microweber 2.0.16 was discovered to contain a Cross Site Scripting (XSS) vulnerability via userfiles\modules\tags\add_tagging_tagged.php |
| CVE-2023-6832 | MI microweber/microweber microweber | 4.3 | Dec 15 | Business Logic Errors in microweber/microweber |
| CVE-2023-6599 | MI microweber/microweber microweber | 4.3 | Dec 8 | Missing Standardized Error Handling Mechanism in microweber/microweber |
| CVE-2023-48122 | MI Microweber Microweber | 7.5 | Dec 8 | An issue in microweber v.2.0.1 and fixed in v.2.0.4 allows a remote attacker to obtain sensitive information via the HTTP GET method |
| CVE-2023-6566 | MI microweber/microweber microweber | 6.5 | Dec 7 | Business Logic Errors in microweber/microweber |
| CVE-2023-49052 | MI Microweber Microweber | 8.8 | Nov 30 | File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component |
| CVE-2023-47379 | MI Microweber Microweber | 5.4 | Nov 8 | Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting (XSS) via the profile picture file upload functionality |
| CVE-2023-5976 | MI microweber/microweber microweber | 4.3 | Nov 7 | Improper Access Control in microweber/microweber |
| CVE-2023-5861 | MI microweber/microweber microweber | 4.8 | Oct 31 | Cross-site Scripting (XSS) - Stored in microweber/microweber |
| CVE-2023-5318 | MI microweber/microweber microweber | 7.5 | Sep 30 | Use of Hard-coded Credentials in microweber/microweber |
| CVE-2023-5244 | MI microweber/microweber microweber | 6.1 | Sep 28 | Cross-site Scripting (XSS) - Reflected in microweber/microweber |
| CVE-2023-3142 | MI microweber/microweber microweber | 5.4 | Jun 7 | Cross-site Scripting (XSS) - Stored in microweber/microweber |
| CVE-2023-2240 | MI microweber/microweber microweber | 8.8 | Apr 22 | Improper Privilege Management in microweber/microweber |
| CVE-2023-2239 | MI microweber/microweber microweber | 6.5 | Apr 22 | Exposure of Private Personal Information to an Unauthorized Actor in microweber/microweber |
| CVE-2023-2014 | MI microweber/microweber microweber | 4.8 | Apr 13 | Cross-site Scripting (XSS) - Generic in microweber/microweber |
| CVE-2023-1877 | MI microweber/microweber microweber | 9.8 | Apr 5 | Command Injection in microweber/microweber |
| CVE-2023-1881 | MI microweber/microweber microweber | 5.4 | Apr 5 | Cross-site Scripting (XSS) - Stored in microweber/microweber |
| CVE-2023-1081 | MI microweber/microweber microweber | 4.8 | Feb 28 | Cross-site Scripting (XSS) - Stored in microweber/microweber |
| CVE-2021-32856 | MI microweber microweber | 6.1 | Feb 20 | Microweber vulnerable to Cross-site Scripting |
| CVE-2021-32857 | MI microweber microweber | 6.1 | Feb 20 | Cockpit vulnerable to Cross-site Scripting |
| CVE-2023-0608 | MI microweber/microweber microweber | 5.4 | Feb 1 | Cross-site Scripting (XSS) - DOM in microweber/microweber |
| CVE-2022-4732 | MI microweber/microweber microweber | 7.2 | Dec 24 | Unrestricted Upload of File with Dangerous Type in microweber/microweber |
| CVE-2022-4647 | MI microweber/microweber microweber | 6.1 | Dec 22 | Cross-site Scripting (XSS) - Stored in microweber/microweber |
| CVE-2022-4617 | MI microweber/microweber microweber | 6.1 | Dec 21 | Cross-site Scripting (XSS) - Reflected in microweber/microweber |
| CVE-2022-0698 | MI Microweber Microweber | 6.1 | Nov 25 | Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter |
| CVE-2022-33012 | MI Microweber Microweber | 8.8 | Nov 22 | Microweber v1.2.15 was discovered to allow attackers to perform an account takeover via a host header injection attack |
| CVE-2022-3245 | MI microweber/microweber microweber | 6.1 | Sep 20 | Code Injection in display of tag title on saving tags in microweber/microweber |
| CVE-2022-3242 | MI microweber/microweber microweber | 6.1 | Sep 20 | HTML code Injection in template search keyword in microweber/microweber |
| CVE-2022-2777 | MI microweber/microweber microweber | 5.4 | Aug 11 | Cross-site Scripting (XSS) - Stored in microweber/microweber |
| CVE-2022-2470 | MI microweber/microweber microweber | 6.1 | Jul 22 | Cross-site Scripting (XSS) - Reflected in microweber/microweber |
| CVE-2022-2495 | MI microweber/microweber microweber | 4.8 | Jul 22 | Cross-site Scripting (XSS) - Stored in microweber/microweber |
| CVE-2021-36461 | MI Microweber Microweber | 8.8 | Jul 15 | An Arbitrary File Upload vulnerability exists in Microweber 1.1.3 that allows attackers to getshell via the Settings Upload Picture section by uploading pictures with malicious… |
| CVE-2022-2368 | MI microweber/microweber microweber | 9.8 | Jul 11 | Authentication Bypass by Spoofing in microweber/microweber |
| CVE-2022-2353 | MI microweber/microweber microweber | 6.1 | Jul 9 | Cross-Site Request Forgery (CSRF) in microweber/microweber |
| CVE-2022-2300 | MI microweber/microweber microweber | 5.4 | Jul 4 | Cross-site Scripting (XSS) - Stored in microweber/microweber |
| CVE-2022-2280 | MI microweber/microweber microweber | 5.4 | Jul 1 | Cross-site Scripting (XSS) - Stored in microweber/microweber |
| CVE-2022-2252 | MI microweber/microweber microweber | 6.1 | Jun 29 | Open Redirect in microweber/microweber |
| CVE-2022-2174 | MI microweber/microweber microweber | 6.1 | Jun 22 | Cross-site Scripting (XSS) - Reflected in microweber/microweber |
| CVE-2022-2130 | MI microweber/microweber microweber | 6.1 | Jun 20 | Cross-site Scripting (XSS) - Reflected in microweber/microweber |