Microweber vulnerabilities
86 published CVEs name Microweber among the affected products.
- Published CVEs
- 86
- Last 12 months
- 6
- Critical
- 5
- Known exploited
- 0
Critical 5High 26Medium 52Low 3Not scored 0
CVEs per yearBy the year they were published
- 202263
- 202317
- 20251
- 20265
Newest CVEs
- CVE-2026-5696
Multiple vulnerabilities in the Microweber administration panel
Microweber · Administration panel
Medium5.9 - CVE-2026-5695
Multiple vulnerabilities in the Microweber administration panel
Microweber · Administration panel
High8.4 - CVE-2026-67617
Microweber CMS 2.0.20 Stored XSS via tag_names Parameter
microweber · microweber
Medium4.8 - CVE-2026-65693
Microweber CMS 2.0.20 Server-Side Template Injection via Mail Templates
microweber · microweber
High8.6 - CVE-2026-65694
Microweber CMS 2.0.20 Path Traversal via ServeStaticFileController
microweber · microweber
High8.7 - CVE-2024-58289
Microweber 2.0.15 Stored Cross-Site Scripting via User Profile Fields
microweber · Microweber
Medium5.3 - CVE-2023-6832
Business Logic Errors in microweber/microweber
microweber · microweber/microweber
Medium6.0 - CVE-2023-6599
Missing Standardized Error Handling Mechanism in microweber/microweber
microweber · microweber/microweber
Low3.1 - CVE-2023-6566
Business Logic Errors in microweber/microweber
microweber · microweber/microweber
Medium5.9 - CVE-2023-5976
Improper Access Control in microweber/microweber
microweber · microweber/microweber
Medium4.6
Products with the most CVEs
Most common weaknesses
- CWE-79 Cross-site scripting (XSS)45
- CWE-434 Unrestricted file upload5
- CWE-94 Code injection5
- CWE-190 Integer overflow4
- CWE-840 4
- CWE-352 Cross-site request forgery (CSRF)3
- CWE-601 Open redirect3
- CWE-209 Sensitive information in an error message2
- CWE-284 Improper access control2
- CWE-863 Incorrect authorization2