MediumCVSS 4.3
EPSS 0.51%
Business Logic Errors in GitHub repository microweber/microweber prior to 2.0.
Product
microweber/microweber vulnerabilities
78 published CVES affecting microweber/microweber, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 78
- Critical
- 3
- High
- 13
- Medium
- 62
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest microweber/microweber CVEs
Newest publication first · page 1 of 4
-
-
MediumCVSS 4.3 EPSS 0.49%
Missing Standardized Error Handling Mechanism in GitHub repository microweber/microweber prior to 2.0.
-
MediumCVSS 6.5 EPSS 0.49%
Business Logic Errors in GitHub repository microweber/microweber prior to 2.0.
-
MediumCVSS 4.3 EPSS 0.47%
Improper Access Control in GitHub repository microweber/microweber prior to 2.0.
-
MediumCVSS 4.8 EPSS 0.50%
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0.
-
HighCVSS 7.5 EPSS 0.65%
Use of Hard-coded Credentials in GitHub repository microweber/microweber prior to 2.0.
-
MediumCVSS 6.1 EPSS 1.1%
Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 2.0.
-
MediumCVSS 5.4 EPSS 0.35%
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0.
-
HighCVSS 8.8 EPSS 0.71%
Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4.
-
MediumCVSS 6.5 EPSS 0.50%
Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.3.4.
-
MediumCVSS 4.8 EPSS 0.48%
Cross-site Scripting (XSS) - Generic in GitHub repository microweber/microweber prior to 1.3.3.
-
MediumCVSS 5.4 EPSS 0.49%
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3.
-
CriticalCVSS 9.8 EPSS 1.8%
Command Injection in GitHub repository microweber/microweber prior to 1.3.3.
-
MediumCVSS 4.8 EPSS 0.43%
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3.
-
MediumCVSS 5.4 EPSS 0.53%
Cross-site Scripting (XSS) - DOM in GitHub repository microweber/microweber prior to 1.3.2.
-
HighCVSS 7.2 EPSS 38.2%
Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2.
-
MediumCVSS 6.1 EPSS 0.56%
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.2.
-
MediumCVSS 6.1 EPSS 0.66%
Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.3.2.
-
CVE-2022-3245 Code Injection in display of tag title on saving tags in microweber/microweber
PublishedMediumCVSS 6.1 EPSS 0.74%HTML injection attack is closely related to Cross-site Scripting (XSS). HTML injection uses HTML to deface the page. XSS, as the name implies, injects JavaScript into the page. Both attacks exploit insufficient validation of user input.
-
MediumCVSS 6.1 EPSS 1.9%
Code Injection in GitHub repository microweber/microweber prior to 1.3.2.
-
MediumCVSS 5.4 EPSS 0.47%
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.1.
-
MediumCVSS 6.1 EPSS 0.97%
Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.21.
-
MediumCVSS 4.8 EPSS 0.69%
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.21.
-
CriticalCVSS 9.8 EPSS 1.2%
Authentication Bypass by Spoofing in GitHub repository microweber/microweber prior to 1.2.20.
-
MediumCVSS 6.1 EPSS 0.53%
Prior to microweber/microweber v1.2.20, due to improper neutralization of input, an attacker can steal tokens to perform cross-site request forgery, fetch contents from same-site and redirect a user.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.