Vulnerabilities (CVE)

Filtered by vendor Microweber Subscribe
Total 102 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-17104 1 Microweber 1 Microweber 2024-11-21 6.8 MEDIUM 8.8 HIGH
An issue was discovered in Microweber 1.0.7. There is a CSRF attack (against the admin user) that can add an administrative account via api/save_user.
CVE-2018-1000826 1 Microweber 1 Microweber 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
Microweber version <= 1.0.7 contains a Cross Site Scripting (XSS) vulnerability in Admin login form template that can result in Execution of JavaScript code.