CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 31/10/2023 |
| CVE-2023-5318 | 高危7.5 | Use of Hard-coded Credentials in GitHub repository microweber/microweber prior to 2.0. | 30/09/2023 |
| CVE-2023-5244 | 中危6.1 | Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 2.0. | 28/09/2023 |
| CVE-2023-3142 | 中危5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0. | 07/06/2023 |
| CVE-2023-2239 | 中危6.5 | Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.3.4. | 22/04/2023 |
| CVE-2023-2240 | 高危8.8 | Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4. | 22/04/2023 |
| CVE-2023-2014 | 中危4.8 | Cross-site Scripting (XSS) - Generic in GitHub repository microweber/microweber prior to 1.3.3. | 13/04/2023 |
| CVE-2023-1881 | 中危5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3. | 05/04/2023 |
| CVE-2023-1877 | 严重9.8 | Command Injection in GitHub repository microweber/microweber prior to 1.3.3. | 05/04/2023 |
| CVE-2023-1081 | 中危4.8 | Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3. | 28/02/2023 |
| CVE-2021-32856 | 中危6.1 | Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting (XSS). For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted in versions 1.2.9 and | 21/02/2023 |
| CVE-2023-0608 | 中危5.4 | Cross-site Scripting (XSS) - DOM in GitHub repository microweber/microweber prior to 1.3.2. | 01/02/2023 |
| CVE-2022-4732 | 高危7.2 | Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2. | 27/12/2022 |
| CVE-2022-4647 | 中危6.1 | Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.2. | 22/12/2022 |
| CVE-2022-4617 | 中危6.1 | Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.3.2. | 21/12/2022 |
| CVE-2022-0698 | 中危6.1 | Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter. | 25/11/2022 |
| CVE-2022-33012 | 高危8.8 | Microweber v1.2.15 was discovered to allow attackers to perform an account takeover via a host header injection attack. | 22/11/2022 |