| CVE-2023-49052 | 高8.8 | File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component. | 30/11/2023 |
| CVE-2023-47379 | 中5.4 | Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting (XSS) via the profile picture file upload functionality. | 08/11/2023 |
| CVE-2023-5976 | 中4.3 | Improper Access Control in GitHub repository microweber/microweber prior to 2.0. | 07/11/2023 |
| CVE-2023-5861 | 中4.8 | Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0. | 31/10/2023 |
| CVE-2023-5318 | 高7.5 | Use of Hard-coded Credentials in GitHub repository microweber/microweber prior to 2.0. | 30/09/2023 |
| CVE-2023-5244 | 中6.1 | Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 2.0. | 28/09/2023 |
| CVE-2023-3142 | 中5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0. | 07/06/2023 |
| CVE-2023-2239 | 中6.5 | Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.3.4. | 22/04/2023 |
| CVE-2023-2240 | 高8.8 | Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4. | 22/04/2023 |
| CVE-2023-2014 | 中4.8 | Cross-site Scripting (XSS) - Generic in GitHub repository microweber/microweber prior to 1.3.3. | 13/04/2023 |
| CVE-2023-1881 | 中5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3. | 05/04/2023 |
| CVE-2023-1877 | 緊急9.8 | Command Injection in GitHub repository microweber/microweber prior to 1.3.3. | 05/04/2023 |
| CVE-2023-1081 | 中4.8 | Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3. | 28/02/2023 |
| CVE-2021-32856 | 中6.1 | Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting (XSS). For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted in versions 1.2.9 and | 21/02/2023 |
| CVE-2023-0608 | 中5.4 | Cross-site Scripting (XSS) - DOM in GitHub repository microweber/microweber prior to 1.3.2. | 01/02/2023 |
| CVE-2022-4732 | 高7.2 | Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2. | 27/12/2022 |
| CVE-2022-4647 | 中6.1 | Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.2. | 22/12/2022 |
| CVE-2022-4617 | 中6.1 | Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.3.2. | 21/12/2022 |
| CVE-2022-0698 | 中6.1 | Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter. | 25/11/2022 |
| CVE-2022-33012 | 高8.8 | Microweber v1.2.15 was discovered to allow attackers to perform an account takeover via a host header injection attack. | 22/11/2022 |