Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (110 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-0608 1 Microweber 1 Microweber 2025-03-26 5.4 Medium
Cross-site Scripting (XSS) - DOM in GitHub repository microweber/microweber prior to 1.3.2.
CVE-2024-40101 1 Microweber 1 Microweber 2025-03-25 7.2 High
A Reflected Cross-site scripting (XSS) vulnerability exists in '/search' in microweber 2.0.15 and earlier allowing unauthenticated remote attackers to inject arbitrary web script or HTML via the 'keywords' parameter.
CVE-2021-32856 1 Microweber 1 Microweber 2025-03-10 6.1 Medium
Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting (XSS). For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted in versions 1.2.9 and 1.2.12, but it is incomplete.
CVE-2023-1877 1 Microweber 1 Microweber 2025-02-10 9.8 Critical
Command Injection in GitHub repository microweber/microweber prior to 1.3.3.
CVE-2023-1881 1 Microweber 1 Microweber 2025-02-10 5.4 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3.
CVE-2023-2014 1 Microweber 1 Microweber 2025-02-06 4.8 Medium
Cross-site Scripting (XSS) - Generic in GitHub repository microweber/microweber prior to 1.3.3.
CVE-2023-2239 1 Microweber 1 Microweber 2025-02-04 6.5 Medium
Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.3.4.
CVE-2023-2240 1 Microweber 1 Microweber 2025-02-04 8.8 High
Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4.
CVE-2023-3142 1 Microweber 1 Microweber 2025-01-06 5.4 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0.
CVE-2023-6832 1 Microweber 1 Microweber 2024-11-27 4.3 Medium
Business Logic Errors in GitHub repository microweber/microweber prior to 2.0.
CVE-2023-6599 1 Microweber 1 Microweber 2024-11-21 4.3 Medium
Missing Standardized Error Handling Mechanism in GitHub repository microweber/microweber prior to 2.0.
CVE-2023-6566 1 Microweber 1 Microweber 2024-11-21 6.5 Medium
Business Logic Errors in GitHub repository microweber/microweber prior to 2.0.
CVE-2023-5976 1 Microweber 1 Microweber 2024-11-21 4.3 Medium
Improper Access Control in GitHub repository microweber/microweber prior to 2.0.
CVE-2023-5861 1 Microweber 1 Microweber 2024-11-21 4.8 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0.
CVE-2023-5318 1 Microweber 1 Microweber 2024-11-21 7.5 High
Use of Hard-coded Credentials in GitHub repository microweber/microweber prior to 2.0.
CVE-2023-5244 1 Microweber 1 Microweber 2024-11-21 6.1 Medium
Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 2.0.
CVE-2023-49052 1 Microweber 1 Microweber 2024-11-21 8.8 High
File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component.
CVE-2023-48122 1 Microweber 1 Microweber 2024-11-21 7.5 High
An issue in microweber v.2.0.1 and fixed in v.2.0.4 allows a remote attacker to obtain sensitive information via the HTTP GET method.
CVE-2023-47379 1 Microweber 1 Microweber 2024-11-21 5.4 Medium
Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting (XSS) via the profile picture file upload functionality.
CVE-2023-1081 1 Microweber 1 Microweber 2024-11-21 4.8 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3.