CVE-2020-23138

概要

参考情報

• gist.github.com/virendratiwari03/0918aaba97eba31666630996ab3aeec3 · Third Party Advisory
• gist.github.com/virendratiwari03/800f96271f22c0c2f5aea126c7f1f170 · Third Party Advisory

microweber のその他の脆弱性

• CVE-2025-70792中 6.1Cross Site Scripting vulnerability in the "/admin/category/create" endpoint of Microweber 2.0.19. An attacker can manipulate the "rel_id" pa…
• CVE-2025-70791中 6.1Cross Site Scripting vulnerability in the "/admin/order/abandoned" endpoint of Microweber 2.0.19. An attacker can manipulate the "orderDirec…
• CVE-2024-58289中 5.4Microweber 2.0.15 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts into …
• CVE-2025-60954高 8.3Microweber CMS 2.0 has Weak Password Requirements. The application does not enforce minimum password length or complexity during password re…
• CVE-2025-51504高 7.6Microweber CMS 2.0 is vulnerable to Cross Site Scripting (XSS)in the /projects/profile, homepage endpoint via the last name field.