Package impact

php Packagist / microweber/microweber

0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2025-70792 unknown 4mo ago Microweber Cross-site Scripting vulnerability php
CVE-2025-70791 unknown 4mo ago Microweber has a Cross-site Scripting vulnerability php
CVE-2025-51504 unknown 10mo ago Microweber XSS Vulnerability in the homepage Endpoint php
CVE-2025-51502 unknown 10mo ago Microweber has Reflected XSS Vulnerability in the layout Parameter php
CVE-2025-51501 unknown 10mo ago Microweber has Reflected XSS Vulnerability in the id Parameter php
CVE-2025-51503 unknown 10mo ago Microweber Has Stored XSS Vulnerability in User Profile Fields php
CVE-2025-34076 unknown 11mo ago Microweber CMS API has authenticated local file inclusion vulnerability php
CVE-2025-2214 unknown 1y ago Microweber vulnerable to XSS attack due to insure `group` component in its Settings handler php
CVE-2024-33299 unknown 1y ago Microweber Cross-site Scripting vulnerability php
CVE-2024-33298 unknown 1y ago Microweber Cross-site Scripting vulnerability php
CVE-2024-33297 unknown 1y ago Microweber Cross-site Scripting vulnerability php
CVE-2024-40101 unknown 2y ago Microweber Reflected Cross-site scripting (XSS) vulnerability php
CVE-2024-41381 unknown 2y ago Microweber Cross Site Scripting (XSS) vulnerability php
CVE-2024-41380 unknown 2y ago Microweber Cross Site Scripting (XSS) vulnerability php
CVE-2023-6832 unknown 3y ago Business Logic Errors in microweber/microweber php
CVE-2023-48122 unknown 3y ago Microweber allows a remote attacker to obtain sensitive information via the HTTP GET method php
CVE-2023-6599 unknown 3y ago Microweber missing standardized error handling mechanism php
CVE-2023-6566 unknown 3y ago Microweber Business Logic Errors php
CVE-2023-49052 unknown 3y ago Microweber file upload vulnerability php
CVE-2023-5976 unknown 3y ago Microweber Improper Access Control vulnerability php
CVE-2023-47379 unknown 3y ago Microweber Cross-site Scripting vulnerability php
CVE-2023-5861 unknown 3y ago Cross-site Scripting (XSS) in microweber/microweber php
CVE-2023-5318 unknown 3y ago Microweber uses hard coded credentials php
CVE-2023-5244 unknown 3y ago Microweber Cross-site Scripting vulnerability php
CVE-2023-3142 unknown 3y ago Microweber Cross-site Scripting vulnerability php
CVE-2023-2239 unknown 3y ago Information exposure in microweber php
CVE-2023-2240 unknown 3y ago Improper Privilege Management in microweber php
CVE-2023-2014 unknown 3y ago Microweber vulnerable to cross-site scripting (XSS) php
CVE-2023-1881 unknown 3y ago Microweber vulnerable to stored cross-site scripting (XSS) via X-Forwarded-For header php
CVE-2023-1877 unknown 3y ago Microweber vulnerable to command injection php
CVE-2023-1081 unknown 3y ago Microweber Cross-site Scripting vulnerability php
CVE-2021-32856 unknown 3y ago Microweber Cross-site Scripting vulnerability php
CVE-2023-0608 unknown 3y ago Microweber contains Cross-site Scripting php
CVE-2022-4732 unknown 4y ago Microweber vulnerable to unrestricted malicious uploads php
CVE-2022-4647 unknown 4y ago Microweber vulnerable to Stored Cross-Site Scripting php
CVE-2022-4617 unknown 4y ago Microweber vulnerable to Reflected Cross-site Scripting php
CVE-2022-0698 unknown 4y ago Microweber vulnerable to cross-site scripting (XSS) php
CVE-2022-33012 unknown 4y ago Account Takeover Through Password Reset Poisoning php
CVE-2022-3242 unknown 4y ago Microweber Cross-site Scripting can result in redirection to a malicious site php
CVE-2022-3245 unknown 4y ago Microweber vulnerable to HTML Injection in create tag functionality php
CVE-2022-2777 unknown 4y ago Microweber's title parameter in the body of POST request vulnerable to stored XSS php
CVE-2022-2495 unknown 4y ago Microweber Stored Cross-site Scripting before v1.2.20 php
CVE-2022-2470 unknown 4y ago Microweber before 1.2.21 vulnerable to reflected XSS php
CVE-2022-2368 unknown 4y ago Microweber before 1.2.21 allows attacker to bypass IP detection to brute-force password php
CVE-2022-2353 unknown 4y ago Microweber before v1.2.20 vulnerable to cross-site scripting php
CVE-2022-2300 unknown 4y ago Cross-site Scripting in microweber php
CVE-2022-2280 unknown 4y ago Cross-site Scripting in microweber php
CVE-2022-2252 unknown 4y ago Open Redirect in microweber php
CVE-2022-2174 unknown 4y ago Cross-site Scripting in Microweber php
CVE-2022-2130 unknown 4y ago Cross-site Scripting in Microweber php
CVE-2020-23136 unknown 4y ago Microweber Insufficient Session Expiry php
CVE-2020-13405 unknown 4y ago Microweber Discloses Sensitive Information php
CVE-2020-13241 unknown 4y ago Microweber allows Unrestricted File Upload php
CVE-2018-1000826 unknown 4y ago Microweber XSS Vulnerability php
CVE-2018-19917 unknown 4y ago Microweber XSS Vulnerability php
CVE-2022-1631 unknown 4y ago Incorrect Authorization in microweber php
CVE-2022-1555 unknown 4y ago Microweber vulnerable to cross-site scripting (XSS) php
CVE-2022-1584 unknown 4y ago Cross-site Scripting in Microweber php
CVE-2022-1504 unknown 4y ago Cross-site Scripting in microweber php
CVE-2022-1439 unknown 4y ago Cross-site Scripting in Microweber php
CVE-2022-1036 unknown 4y ago Integer Overflow or Wraparound in Microweber php
CVE-2022-0954 unknown 4y ago Stored Cross-site Scripting in Microweber php
CVE-2022-0961 unknown 4y ago Denial of service in microweber php
CVE-2022-0963 unknown 4y ago Unrestricted XML files leading to cross-site scripting in Microweber php
CVE-2022-0968 unknown 4y ago Integer Overflow in microweber php
CVE-2022-0926 unknown 4y ago Cross-site Scripting in microweber php
CVE-2022-0929 unknown 4y ago Cross-site Scripting in microweber php
CVE-2022-0930 unknown 4y ago Cross-site Scripting in microweber php
CVE-2022-0913 unknown 4y ago Integer Overflow or Wraparound in Microweber php
CVE-2022-0912 unknown 4y ago Unrestricted Upload of File with Dangerous Type in microweber php
CVE-2022-0928 unknown 4y ago Cross-site Scripting in microweber php
CVE-2022-0921 unknown 4y ago Unrestricted Upload of File with Dangerous Type in Microweber php
CVE-2022-0906 unknown 4y ago Unrestricted file upload leads to stored cross-site scripting in Microweber php
CVE-2022-0895 unknown 4y ago Static Code Injection in Microweber php
CVE-2022-0896 unknown 4y ago Improper Neutralization of Special Elements Used in a Template Engine in microweber php
CVE-2022-0777 unknown 4y ago Rate limit missing in microweber php
CVE-2022-0762 unknown 4y ago Exposure of Resource to Wrong Sphere in microweber php
CVE-2022-0763 unknown 4y ago Cross-site Scripting in microweber php
CVE-2022-0723 unknown 4y ago Cross-site Scripting in microweber php
CVE-2022-0721 unknown 4y ago Insertion of Sensitive Information Into Debugging Code in Microweber php
CVE-2022-0719 unknown 4y ago Cross-site Scripting in Microweber php
CVE-2022-0724 unknown 4y ago Insecure Storage of Sensitive Information in Microweber php
CVE-2022-0688 unknown 4y ago Business Logic Errors in microweber php
CVE-2022-0678 unknown 4y ago Cross-site Scripting in microweber php
CVE-2022-0689 unknown 4y ago Business Logic Errors in microweber php
CVE-2022-0690 unknown 4y ago Cross-site Scripting in microweber php
CVE-2022-0660 unknown 4y ago Generation of Error Message Containing Sensitive Information in microweber php
CVE-2022-0666 unknown 4y ago CRLF Injection in microweber php
CVE-2022-0638 unknown 4y ago Cross-Site Request Forgery microweber php
CVE-2022-0596 unknown 4y ago Microweber vulnerable to Improper Validation of Specified Quantity in Input php
CVE-2022-0597 unknown 4y ago Open redirect in microweber php
CVE-2022-0557 unknown 4y ago OS Command Injection in Microweber php
CVE-2022-0560 unknown 4y ago Open redirect in microweber php
CVE-2022-0558 unknown 4y ago Cross-site Scripting in microweber php
CVE-2020-28337 unknown 4y ago Zip slip in Microweber php
CVE-2022-0505 unknown 4y ago Cross-Site Request Forgery in microweber php
CVE-2022-0506 unknown 4y ago Cross-site Scripting in microweber php
CVE-2022-0504 unknown 4y ago Generation of Error Message Containing Sensitive Information in microweber php
CVE-2022-0379 unknown 4y ago Cross-site Scripting in microweber php
CVE-2022-0378 unknown 4y ago Cross-site Scripting in microweber php