Microweber vulnerabilities
87 CVEs and advisories name Microweber as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-5696Multiple vulnerabilities in the Microweber administration panel
- CVE-2026-5695Multiple vulnerabilities in the Microweber administration panel
- CVE-2026-67617Microweber CMS 2.0.20 Stored XSS via tag_names Parameter
- CVE-2026-65693Microweber CMS 2.0.20 Server-Side Template Injection via Mail Templates
- CVE-2026-65694Microweber CMS 2.0.20 Path Traversal via ServeStaticFileController
- CVE-2024-58289Microweber 2.0.15 Stored Cross-Site Scripting via User Profile Fields
- CVE-2025-34076Microweber CMS Authenticated Local File Inclusion via Backup API
- CVE-2023-6832Business Logic Errors in microweber/microweber
- CVE-2023-6599Missing Standardized Error Handling Mechanism in microweber/microweber
- CVE-2023-6566Business Logic Errors in microweber/microweber
- CVE-2023-5976Improper Access Control in microweber/microweber
- CVE-2023-5861Cross-site Scripting (XSS) - Stored in microweber/microweber
- CVE-2023-5318Use of Hard-coded Credentials in microweber/microweber
- CVE-2023-5244Cross-site Scripting (XSS) - Reflected in microweber/microweber
- CVE-2023-3142Cross-site Scripting (XSS) - Stored in microweber/microweber
- CVE-2023-2240Improper Privilege Management in microweber/microweber
- CVE-2023-2239Exposure of Private Personal Information to an Unauthorized Actor in microweber/microweber
- CVE-2023-2014Cross-site Scripting (XSS) - Generic in microweber/microweber
- CVE-2023-1881Cross-site Scripting (XSS) - Stored in microweber/microweber
- CVE-2023-1877Command Injection in microweber/microweber
- CVE-2023-1081Cross-site Scripting (XSS) - Stored in microweber/microweber
- CVE-2021-32857Cockpit vulnerable to Cross-site Scripting
- CVE-2021-32856Microweber vulnerable to Cross-site Scripting
- CVE-2023-0608Cross-site Scripting (XSS) - DOM in microweber/microweber
- CVE-2022-4732Unrestricted Upload of File with Dangerous Type in microweber/microweber
- CVE-2022-4647Cross-site Scripting (XSS) - Stored in microweber/microweber
- CVE-2022-4617Cross-site Scripting (XSS) - Reflected in microweber/microweber
- CVE-2022-3245 Code Injection in display of tag title on saving tags in microweber/microweber
- CVE-2022-3242HTML code Injection in template search keyword in microweber/microweber
- CVE-2022-2777Cross-site Scripting (XSS) - Stored in microweber/microweber