Known vulnerabilities in Microweber

Vendor: Microweber CMS Ltd.
Software: Microweber
Software CPE: cpe:2.3:a:microweber_cms:microweber:*:*:*:*:*:*:*:*
Website: https://microweber.com/
Total vulnerabilities: 9
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microweber Microweber is affected by 9 known vulnerabilities: 2 high, 2 medium, 5 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61380 - Unrestricted Upload of File with Dangerous Type
CVE-2022-0912		 CWE-434 Low
No
No
 1.2.11 15.03.2022 SB2022031517
#VU61379 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-0928		 CWE-79 Low
No
No
 1.2.12 15.03.2022 SB2022031516
#VU60883 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0721		 CWE-200 Medium
No
No
 1.3.0 25.02.2022 SB2022022519
#VU60882 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-0719		 CWE-79 Low
No
No
 1.3.0 25.02.2022 SB2022022519
#VU57842 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-33988		 CWE-79 Low
No
No
 1.2.8 01.11.2021 SB2021110107
#VU31780 - Exposure of sensitive information to an unauthorized actor
CVE-2020-13405		 CWE-200 Medium
Available
No
 1.1.20 23.07.2020 SB2020072302
#VU28341 - Unrestricted Upload of File with Dangerous Type
CVE-2020-13241		 CWE-434 High
No
No
 - 29.05.2020 SB2020052908
#VU36059 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-19917		 CWE-79 Low
No
No
 - 21.03.2019 SB2019032136
#VU36694 - Cross-Site Request Forgery (CSRF)
CVE-2018-17104		 CWE-352 High
No
No
 - 16.09.2018 SB2018091605