Vulnerabilities > Microweber > Microweber > 1.0.6

DATE CVE VULNERABILITY TITLE RISK
2022-03-15 CVE-2022-0954 Cross-site Scripting vulnerability in Microweber
Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in GitHub repository microweber/microweber prior to 1.2.11.
network
microweber CWE-79
3.5
2022-03-12 CVE-2022-0930 Cross-site Scripting vulnerability in Microweber
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12.
network
microweber CWE-79
3.5
2022-03-12 CVE-2022-0929 Cross-site Scripting vulnerability in Microweber
XSS on dynamic_text module in GitHub repository microweber/microweber prior to 1.2.11.
network
microweber CWE-79
4.3
2022-03-12 CVE-2022-0926 Cross-site Scripting vulnerability in Microweber
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12.
network
microweber CWE-79
3.5
2022-03-11 CVE-2022-0921 Unrestricted Upload of File with Dangerous Type vulnerability in Microweber
Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12.
network
low complexity
microweber CWE-434
6.5
2022-03-11 CVE-2022-0928 Cross-site Scripting vulnerability in Microweber
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.12.
network
microweber CWE-79
3.5
2022-03-11 CVE-2022-0912 Unrestricted Upload of File with Dangerous Type vulnerability in Microweber
Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.2.11.
3.5
2022-03-11 CVE-2022-0913 Integer Overflow or Wraparound vulnerability in Microweber
Integer Overflow or Wraparound in GitHub repository microweber/microweber prior to 1.3.
network
low complexity
microweber CWE-190
5.0
2022-03-10 CVE-2022-0906 Cross-site Scripting vulnerability in Microweber
Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12.
network
microweber CWE-79
3.5
2022-03-10 CVE-2022-0895 Unspecified vulnerability in Microweber
Static Code Injection in GitHub repository microweber/microweber prior to 1.3.
network
low complexity
microweber
critical
9.8