CVE-2021-32856mediumCWE-79

CVE-2021-32856: falha de média gravidade em microweber

Microweber vulnerable to Cross-site Scripting

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar microweber+ Monitorar microweber/microweber

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.1epss 0.6%
Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting (XSS). For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted in versions 1.2.9 and 1.2.12, but it is incomplete.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
microweber · microweber
CVEs relacionadas — microweber

No mesmo produto, das mais perigosas para as menos.

CVE-2026-65694HIGHMicroweber CMS 2.0.20 Path Traversal via ServeStaticFileControllerEPSS 3.4%CVE-2026-65693HIGHMicroweber CMS 2.0.20 Server-Side Template Injection via Mail TemplatesEPSS 0.9%CVE-2021-32857MEDIUMCockpit vulnerable to Cross-site ScriptingEPSS 0.7%CVE-2026-67617MEDIUMMicroweber CMS 2.0.20 Stored XSS via tag_names ParameterEPSS 0.3%