Security
فارسی
All products

microweber/microweber

Composer · Package
106 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Microweber vulnerable to Path TraversalCVE-2026-12198 · GHSA-VV4X-QCPQ-WGRG microweber/microweber Composer Medium No fix reported
Code Injection in microweberCVE-2022-0282 · GHSA-P5HJ-XXFR-PWC3 microweber/microweber Composer High Fix reported
Microweber Cross-site Scripting vulnerabilityCVE-2025-70792 · GHSA-6W5W-JX4X-VJVW microweber/microweber Composer Low Fix reported
Microweber has a Cross-site Scripting vulnerabilityCVE-2025-70791 · GHSA-5JG5-XQFW-RV92 microweber/microweber Composer Low Fix reported
Microweber XSS Vulnerability in the homepage Endpoint CVE-2025-51504 · GHSA-2X2J-3C2V-G3C2 microweber/microweber Composer Medium No fix reported
Microweber has Reflected XSS Vulnerability in the layout ParameterCVE-2025-51502 · GHSA-MVJ3-HC7J-VP74 microweber/microweber Composer Medium No fix reported
Microweber has Reflected XSS Vulnerability in the id ParameterCVE-2025-51501 · GHSA-8357-FJVX-XRM8 microweber/microweber Composer Medium No fix reported
Microweber Has Stored XSS Vulnerability in User Profile FieldsCVE-2025-51503 · GHSA-782F-GXJ5-XVQC microweber/microweber Composer Low No fix reported
Microweber vulnerable to XSS attack due to insure `group` component in its Settings handlerCVE-2025-2214 · GHSA-HCGH-R5GQ-6QC2 microweber/microweber Composer Low No fix reported
Microweber CMS API has authenticated local file inclusion vulnerabilityCVE-2025-34076 · GHSA-J64V-XH5W-8HQJ microweber/microweber Composer Medium Fix reported
Account Takeover Through Password Reset PoisoningCVE-2022-33012 · GHSA-RP7F-FHM8-9HPF microweber/microweber Composer High No fix reported
Microweber vulnerable to cross-site scripting (XSS)CVE-2022-0698 · GHSA-79GX-3FM8-QXQQ microweber/microweber Composer Medium No fix reported
Microweber Reflected Cross-site scripting (XSS) vulnerabilityCVE-2024-40101 · GHSA-M99V-MMG2-66VF microweber/microweber Composer Medium Fix reported
Microweber Cross-site Scripting vulnerabilityCVE-2024-33299 · GHSA-97H9-P9F8-4P3R microweber/microweber Composer Medium No fix reported
Microweber Cross-site Scripting vulnerabilityCVE-2024-33298 · GHSA-W5G5-4JJ3-8F6V microweber/microweber Composer Medium No fix reported
Microweber Cross-site Scripting vulnerabilityCVE-2024-33297 · GHSA-J4V9-CM37-H7C2 microweber/microweber Composer Medium No fix reported
Business Logic Errors in microweberCVE-2022-0688 · GHSA-C5GJ-W4HX-GVMX microweber/microweber Composer Low Fix reported
Insecure Storage of Sensitive Information in MicroweberCVE-2022-0724 · GHSA-J8CX-J9J2-F29W microweber/microweber Composer High Fix reported
Business Logic Errors in microweberCVE-2022-0689 · GHSA-3P9J-442X-HJP7 microweber/microweber Composer Medium Fix reported
Microweber Business Logic ErrorsCVE-2023-6566 · GHSA-3RPX-PGMF-J96H microweber/microweber Composer Medium Fix reported