Microweber vulnerabilities

Products

• Microweber 119
• Microweber/microweber 78
• Administration Panel 2

Newest

• doccms administration panel Multiple vulnerabilities in the Microweber administration panel CVE-2026-5696 5.9 MediumSeptember 23, 2026
• doccms administration panel Multiple vulnerabilities in the Microweber administration panel CVE-2026-5695 8.4 HighSeptember 23, 2026
• microweber Microweber CMS 2.0.20 Stored XSS via tag_names Parameter CVE-2026-67617 4.8 MediumAugust 3, 2026
• microweber Microweber CMS 2.0.20 Server-Side Template Injection via Mail Templates CVE-2026-65693 8.6 HighJuly 24, 2026
• microweber Microweber CMS 2.0.20 Path Traversal via ServeStaticFileController CVE-2026-65694 Public exploit 8.7 HighJuly 23, 2026
• microweber Microweber API Endpoint thumbnail_img userfiles_path path traversal CVE-2026-12198 6.9 MediumJune 15, 2026
• microweber Microweber Cross-site Scripting vulnerability CVE-2025-70792 Fix available 6.1 MediumFebruary 5, 2026
• microweber Microweber has a Cross-site Scripting vulnerability CVE-2025-70791 Fix available 6.1 MediumFebruary 5, 2026
• microweber Microweber 2.0.15 Stored Cross-Site Scripting via User Profile Fields CVE-2024-58289 5.3 MediumDecember 11, 2025
• microweber Microweber CMS 2.0 has Weak Password Requirements. The application does not enforce minimum... CVE-2025-60954 8.3 HighOctober 24, 2025
• microweber Microweber XSS Vulnerability in the homepage Endpoint CVE-2025-51504 7.6 HighAugust 1, 2025
• microweber Microweber has Reflected XSS Vulnerability in the layout Parameter CVE-2025-51502 6.1 MediumAugust 1, 2025
• microweber Microweber has Reflected XSS Vulnerability in the id Parameter CVE-2025-51501 6.1 MediumAugust 1, 2025
• microweber Microweber Has Stored XSS Vulnerability in User Profile Fields CVE-2025-51503 7.6 HighJuly 31, 2025
• microweber, microweber ltd. cms +1 more Microweber CMS Authenticated Local File Inclusion via Backup API CVE-2025-34076 Fix available 6.1 MediumJuly 2, 2025
• microweber Microweber Settings index.php cross site scripting CVE-2025-2214 5.1 MediumMarch 11, 2025
• microweber Microweber Cross-site Scripting vulnerability CVE-2024-33299 Public exploit 4.7 MediumJanuary 10, 2025
• microweber Microweber Cross-site Scripting vulnerability CVE-2024-33298 Public exploit 6.1 MediumJanuary 10, 2025
• microweber Microweber Cross-site Scripting vulnerability CVE-2024-33297 Public exploit 4.7 MediumJanuary 10, 2025
• microweber Microweber Reflected Cross-site scripting (XSS) vulnerability CVE-2024-40101 Fix available 6.1 MediumAugust 6, 2024
• microweber Microweber Cross Site Scripting (XSS) vulnerability CVE-2024-41381 6.1 MediumAugust 5, 2024
• microweber Microweber Cross Site Scripting (XSS) vulnerability CVE-2024-41380 6.1 MediumAugust 5, 2024
• microweber, microweber microweber/microweber +1 more Business Logic Errors in microweber/microweber CVE-2023-6832 Fix available 6.0 MediumDecember 15, 2023
• microweber, microweber microweber/microweber +1 more Missing Standardized Error Handling Mechanism in microweber/microweber CVE-2023-6599 Fix available 3.1 LowDecember 8, 2023
• microweber Microweber allows a remote attacker to obtain sensitive information via the HTTP GET method CVE-2023-48122 Fix available 7.5 HighDecember 8, 2023
• microweber, microweber microweber/microweber +1 more Business Logic Errors in microweber/microweber CVE-2023-6566 Fix available 5.9 MediumDecember 7, 2023
• microweber Microweber file upload vulnerability CVE-2023-49052 Public exploit 8.8 HighNovember 30, 2023
• microweber Microweber Cross-site Scripting vulnerability CVE-2023-47379 Fix available 5.4 MediumNovember 8, 2023
• microweber, microweber microweber/microweber +1 more Improper Access Control in microweber/microweber CVE-2023-5976 Fix available 4.6 MediumNovember 7, 2023
• microweber, microweber microweber/microweber +1 more Cross-site Scripting (XSS) - Stored in microweber/microweber CVE-2023-5861 Fix available 6.4 MediumOctober 31, 2023
• microweber, microweber microweber/microweber +1 more Use of Hard-coded Credentials in microweber/microweber CVE-2023-5318 5.8 MediumSeptember 30, 2023
• microweber, microweber microweber/microweber +1 more Cross-site Scripting (XSS) - Reflected in microweber/microweber CVE-2023-5244 5.0 MediumSeptember 28, 2023
• microweber, microweber microweber/microweber +1 more Cross-site Scripting (XSS) - Stored in microweber/microweber CVE-2023-3142 3.8 LowJune 7, 2023
• microweber, microweber microweber/microweber +1 more Improper Privilege Management in microweber/microweber CVE-2023-2240 Fix available 8.8 HighApril 22, 2023
• microweber, microweber microweber/microweber +1 more Exposure of Private Personal Information to an Unauthorized Actor in microweber/microweber CVE-2023-2239 Fix available 7.1 HighApril 22, 2023
• microweber, microweber microweber/microweber +1 more Cross-site Scripting (XSS) - Generic in microweber/microweber CVE-2023-2014 Fix available 5.3 MediumApril 13, 2023
• microweber, microweber microweber/microweber +1 more Cross-site Scripting (XSS) - Stored in microweber/microweber CVE-2023-1881 Fix available 7.4 HighApril 5, 2023
• microweber, microweber microweber/microweber +1 more Command Injection in microweber/microweber CVE-2023-1877 Fix available 6.1 MediumApril 5, 2023
• microweber, microweber microweber/microweber +1 more Cross-site Scripting (XSS) - Stored in microweber/microweber CVE-2023-1081 5.7 MediumFebruary 28, 2023
• agentejo cockpit, microweber +1 more Cockpit vulnerable to Cross-site Scripting CVE-2021-32857 6.1 MediumFebruary 20, 2023
• microweber Microweber vulnerable to Cross-site Scripting CVE-2021-32856 6.1 MediumFebruary 20, 2023
• microweber, microweber microweber/microweber +1 more Cross-site Scripting (XSS) - DOM in microweber/microweber CVE-2023-0608 Fix available 6.3 MediumFebruary 1, 2023
• microweber, microweber microweber/microweber +1 more Unrestricted Upload of File with Dangerous Type in microweber/microweber CVE-2022-4732 Fix available EPSS 38.2% 4.7 MediumDecember 24, 2022
• microweber, microweber microweber/microweber +1 more Cross-site Scripting (XSS) - Stored in microweber/microweber CVE-2022-4647 5.1 MediumDecember 22, 2022
• microweber, microweber microweber/microweber +1 more Cross-site Scripting (XSS) - Reflected in microweber/microweber CVE-2022-4617 2.7 LowDecember 21, 2022
• microweber Microweber vulnerable to cross-site scripting (XSS) CVE-2022-0698 6.1 MediumNovember 25, 2022
• microweber Account Takeover Through Password Reset Poisoning CVE-2022-33012 8.8 HighNovember 22, 2022
• microweber, microweber microweber/microweber +1 more Code Injection in display of tag title on saving tags in microweber/microweber CVE-2022-3245 Fix available 4.3 MediumSeptember 20, 2022
• microweber, microweber microweber/microweber +1 more HTML code Injection in template search keyword in microweber/microweber CVE-2022-3242 Fix available 4.3 MediumSeptember 20, 2022
• microweber, microweber microweber/microweber +1 more Cross-site Scripting (XSS) - Stored in microweber/microweber CVE-2022-2777 Fix available 6.6 MediumAugust 11, 2022
• Show olderLoading…