Analyzed
1 day
ago.
based on code collected
2 days
ago.
Major Versions
click and drag to zoom
Security Vulnerabilities for Version:
Severities:
Type
|
Identifier
|
Related Record |
Severity
|
Date Published
|
Description | Versions Affected |
|---|---|---|---|---|---|
| CVE-2026-12198 | High | Jun 15, 2026 | A weakness has been identified in Microweber up to 2.0.20. This affects the function userfiles_path of the file /api_nosession/thumbnail_img of the com more... |
2.0.20, 2.0.19, 2.0.18, 2.0.17, 2.0.16, 2.0.15, 2.0.14, 2.0.13, 2.0.12, 2.0.11
|
|
| BDSA-2025-14541 | Medium | Oct 27, 2025 | Microweber CMS is vulnerable to weak password enforcement due to inadequate password policy during the reset process. This could allow an attacker to c more... | ||
| BDSA-2024-10897 | Medium | Dec 19, 2025 | Microweber is vulnerable to stored cross-site scripting (XSS) due to improper input validation in user profile fields. An authenticated remote attacker more... |
