Vulnerabilities > Microweber > Low

DATE CVE VULNERABILITY TITLE RISK
2022-02-26 CVE-2022-0763 Cross-site Scripting vulnerability in Microweber
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.
network
microweber CWE-79
3.5
2022-02-23 CVE-2022-0719 Cross-site Scripting vulnerability in Microweber
Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.3.
network
microweber CWE-79
3.5
2022-02-10 CVE-2022-0558 Cross-site Scripting vulnerability in Microweber
Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.
network
microweber CWE-79
3.5
2022-02-08 CVE-2022-0506 Cross-site Scripting vulnerability in Microweber
Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.
network
microweber CWE-79
3.5
2022-01-26 CVE-2022-0379 Cross-site Scripting vulnerability in Microweber
Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.
network
microweber CWE-79
3.5
2022-01-20 CVE-2022-0278 Cross-site Scripting vulnerability in Microweber
Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.
network
microweber CWE-79
3.5
2020-11-09 CVE-2020-23136 Insufficient Session Expiration vulnerability in Microweber 1.1.18
Microweber v1.1.18 is affected by no session expiry after log-out.
local
low complexity
microweber CWE-613
2.1
2020-11-09 CVE-2020-23139 Improper Authentication vulnerability in Microweber 1.1.18
Microweber 1.1.18 is affected by broken authentication and session management.
local
low complexity
microweber CWE-287
2.1