Microweber XSS Vulnerability in the homepage Endpoint

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-51504 · ADVISORY
• microweber/microweber · PACKAGE
• progprnv/CVE-Reports · WEB
• progprnv/CVE-Reports · WEB
• progprnv/CVE-Reports · WEB

microweber/microweber のその他の脆弱性

• CVE-2026-12198高 7.3A weakness has been identified in Microweber up to 2.0.20. This affects the function userfiles_path of the file /api_nosession/thumbnail_img…
• CVE-2025-70792中 6.1Cross Site Scripting vulnerability in the "/admin/category/create" endpoint of Microweber 2.0.19. An attacker can manipulate the "rel_id" pa…
• CVE-2025-70791中 6.1Cross Site Scripting vulnerability in the "/admin/order/abandoned" endpoint of Microweber 2.0.19. An attacker can manipulate the "orderDirec…
• CVE-2025-51502中 6.1Reflected Cross-Site Scripting (XSS) in Microweber CMS 2.0 via the layout parameter on the /admin/page/create page allows arbitrary JavaScri…
• CVE-2025-51501中 6.1Reflected Cross-Site Scripting (XSS) in the id parameter of the live_edit.module_settings API endpoint in Microweber CMS2.0 allows execution…