Vulnerabilities in Microweber

86 results
Vexday analysis

O Microweber apresenta 2 vulnerabilidades catalogadas, ambas publicadas nos últimos 90 dias, sem registros de exploração ativa (KEV) até o momento. A fraqueza dominante é CWE-434 (upload de arquivo restrito inadequadamente), um vetor clássico de comprometimento, mas a ausência de críticas e atividade explorada em campo sugere risco moderado e controlável com patching oportuno.

CVE-2022-0638MEDIUMCross-Site Request Forgery (CSRF) in microweber/microweberEPSS 0.4%CVE-2023-3142LOWCross-site Scripting (XSS) - Stored in microweber/microweberEPSS 0.3%CVE-2024-58289MEDIUMMicroweber 2.0.15 Stored Cross-Site Scripting via User Profile FieldsEPSS 0.3%CVE-2026-67617MEDIUMMicroweber CMS 2.0.20 Stored XSS via tag_names ParameterEPSS 0.2%CVE-2026-5696MEDIUMMultiple vulnerabilities in the Microweber administration panelEPSS —CVE-2026-5695HIGHMultiple vulnerabilities in the Microweber administration panelEPSS —