| CVE-2022-0689 | 中5.3 | Use multiple time the one-time coupon in Packagist microweber/microweber prior to 1.2.11. | 19/02/2022 |
| CVE-2022-0678 | 中6.1 | Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11. | 19/02/2022 |
| CVE-2022-0666 | 高7.5 | CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11. | 18/02/2022 |
| CVE-2022-0660 | 高7.5 | Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11. | 18/02/2022 |
| CVE-2022-0638 | 中4.3 | Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11. | 17/02/2022 |
| CVE-2022-0597 | 中6.1 | Open Redirect in Packagist microweber/microweber prior to 1.2.11. | 15/02/2022 |
| CVE-2022-0596 | 中4.3 | Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11. | 15/02/2022 |
| CVE-2022-0560 | 中6.1 | Open Redirect in Packagist microweber/microweber prior to 1.2.11. | 11/02/2022 |
| CVE-2022-0557 | 高7.2 | OS Command Injection in Packagist microweber/microweber prior to 1.2.11. | 11/02/2022 |
| CVE-2022-0558 | 中5.4 | Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11. | 10/02/2022 |
| CVE-2022-0506 | 中5.4 | Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11. | 08/02/2022 |
| CVE-2022-0505 | 中6.5 | Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11. | 08/02/2022 |
| CVE-2022-0504 | 中6.5 | Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11. | 08/02/2022 |
| CVE-2022-0379 | 中5.4 | Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11. | 26/01/2022 |
| CVE-2022-0378 | 中5.4 | Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11. | 26/01/2022 |
| CVE-2022-0282 | 高7.5 | Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11. | 20/01/2022 |
| CVE-2022-0281 | 高7.5 | Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11. | 20/01/2022 |
| CVE-2022-0278 | 中5.4 | Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11. | 20/01/2022 |
| CVE-2022-0277 | 中6.5 | Incorrect Permission Assignment for Critical Resource in Packagist microweber/microweber prior to 1.2.11. | 20/01/2022 |
| CVE-2021-33988 | 中6.1 | Cross Site Scripting (XSS). vulnerability exists in Microweber CMS 1.2.7 via the Login form, which could let a malicious user execute Javascript by Inserting code in the request form. | 19/10/2021 |