MMicroweber

Products

Exploited and recent CVEs

• CVE-2026-5696 Medium 5.9 Multiple vulnerabilities in the Microweber administration panel 0.4%
• CVE-2026-5695 High 8.4 Multiple vulnerabilities in the Microweber administration panel 0.4%
• CVE-2026-67617 Medium 4.8 Microweber CMS 2.0.20 Stored XSS via tag_names Parameter 0.3%
• CVE-2026-65693 High 7.2 Microweber CMS 2.0.20 Server-Side Template Injection via Mail Templates 0.9%
• CVE-2026-65694 High 7.5 Microweber CMS 2.0.20 Path Traversal via ServeStaticFileController 3.4%
• CVE-2024-58289 Medium 5.3 Microweber 2.0.15 Stored Cross-Site Scripting via User Profile Fields 0.3%
• CVE-2023-6832 Medium 6.0 Business Logic Errors in microweber/microweber 0.5%
• CVE-2023-6599 Low 3.1 Missing Standardized Error Handling Mechanism in microweber/microweber 0.5%
• CVE-2023-6566 Medium 5.9 Business Logic Errors in microweber/microweber 0.5%
• CVE-2023-5976 Medium 4.6 Improper Access Control in microweber/microweber 0.4%
• CVE-2023-5861 Medium 6.4 Cross-site Scripting (XSS) - Stored in microweber/microweber 0.5%
• CVE-2023-5318 Medium 5.8 Use of Hard-coded Credentials in microweber/microweber 0.7%
• CVE-2023-5244 Medium 5.0 Cross-site Scripting (XSS) - Reflected in microweber/microweber 1.1%
• CVE-2023-3142 Low 3.8 Cross-site Scripting (XSS) - Stored in microweber/microweber 0.3%
• CVE-2023-2239 High 7.1 Exposure of Private Personal Information to an Unauthorized Actor in microweber/microweber 0.5%
• CVE-2023-2240 High 8.8 Improper Privilege Management in microweber/microweber 0.7%
• CVE-2023-2014 Medium 5.3 Cross-site Scripting (XSS) - Generic in microweber/microweber 0.5%
• CVE-2023-1881 High 7.4 Cross-site Scripting (XSS) - Stored in microweber/microweber 0.5%
• CVE-2023-1877 Medium 6.1 Command Injection in microweber/microweber 1.8%
• CVE-2023-1081 Medium 5.7 Cross-site Scripting (XSS) - Stored in microweber/microweber 0.4%
• CVE-2021-32856 Medium 6.1 Microweber vulnerable to Cross-site Scripting 0.6%
• CVE-2021-32857 Medium 6.1 Cockpit vulnerable to Cross-site Scripting 0.7%
• CVE-2023-0608 Medium 6.3 Cross-site Scripting (XSS) - DOM in microweber/microweber 0.5%
• CVE-2022-4732 Medium 4.7 Unrestricted Upload of File with Dangerous Type in microweber/microweber 38.2%
• CVE-2022-4647 Medium 5.1 Cross-site Scripting (XSS) - Stored in microweber/microweber 0.6%
• CVE-2022-4617 Low 2.7 Cross-site Scripting (XSS) - Reflected in microweber/microweber 0.7%
• CVE-2022-3245 Medium 4.3 Code Injection in display of tag title on saving tags in microweber/microweber 0.7%
• CVE-2022-3242 Medium 4.3 HTML code Injection in template search keyword in microweber/microweber 1.9%
• CVE-2022-2777 Medium 6.6 Cross-site Scripting (XSS) - Stored in microweber/microweber 0.5%
• CVE-2022-2470 Medium 6.5 Cross-site Scripting (XSS) - Reflected in microweber/microweber 1.0%