#Microweber
LightNews LightNews
euvd-bot.bsky.social
🚨 EUVD-2026-85220
📊 5.9/10
🏢 microweber

📝 Reflected Cross-Site Scripting (XSS) in Microweber. The vulnerability lies in the ‘group’ parameter of the ‘/admin/settings’ endpoint in the administra...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-85220

#cybersecurity #infosec #cve #euvd
September 23, 2026 at 12:02 PM
euvd-bot.bsky.social
🚨 EUVD-2026-85219
📊 8.4/10
🏢 microweber

📝 Arbitrary file upload vulnerability due to a lack of proper validation in upload forms. This allows authenticated users to upload files to the server w...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-85219

#cybersecurity #infosec #cve #euvd
September 23, 2026 at 12:02 PM
crowncloud.bsky.social
Drag. Drop. Done.
Install #Microweber #CMS on #AlmaLinux 8 using the #LAMPStack - a powerful drag-and-drop website builder and CMS.
Perfect for beginners & pros alike!

Refer to our wiki:
wiki.crowncloud.net?How_to_Insta...

#AlmaLinux8 #OpenSource #SelfHosted #Linux #TechGuide #WebBuilder
How To Install Microweber CMS With LAMP Stack On AlmaLinux 8
How to Install Microweber CMS with LAMP Stack on AlmaLinux 8
wiki.crowncloud.net
July 28, 2025 at 7:01 AM
halfapoundofpixels.com
Here’s a screen shot of 25 of them:
25 content management systems I tried testing, including b2evolution, dotclear cms, geeklog, pluxml, serendipity, textpattern, backdrop, classicpress, cms made simple, composr, concrete, getsimple cms, grav, lepton, microweber, modx, omeka, phpwcms, silverstripe, spip, typo3, websitebaker, and wondercms.
May 5, 2024 at 4:28 PM
archiveos.bsky.social
Microweber – an open-source website building tool and content management system. Microweber is built using the PHP programming language and the Laravel 8 web application framework, with built-in drag-and-drop technology... archiveapp.org/microweber/ #cms #blogging #linux #osx #windows #bsd #unix
Microweber
Web site: www.microweber.com Category: Network Subcategory: Content Management System Platform: Cross-platform License: MIT Interface: Web-interface Wikipedia: Microweber First release: 2013…
archiveapp.org
May 15, 2025 at 9:23 AM
vulnerability-lookup.social.circl.lu.ap.brid.gy
You can now share your thoughts on vulnerability CVE-2025-2214 in Vulnerability-Lookup:
https://vulnerability.circl.lu/vuln/CVE-2025-2214

n/a - Microweber

#vulnerabilitylookup #vulnerability #cybersecurity #bot
cvelistv5 - CVE-2025-2214
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
March 11, 2025 at 11:51 PM
vulnerability-lookup.social.circl.lu.ap.brid.gy
You can now share your thoughts on vulnerability CVE-2025-34076 in Vulnerability-Lookup:
https://vulnerability.circl.lu/vuln/CVE-2025-34076

Microweber Ltd. - CMS

#vulnerabilitylookup #vulnerability #cybersecurity #bot
cvelistv5 - CVE-2025-34076
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
July 2, 2025 at 7:29 PM
euvd-bot.bsky.social
🚨 EUVD-2026-52487
📊 4.8/10
🏢 microweber

📝 Microweber CMS through 2.0.20 contains a stored cross-site scripting vulnerability in the content tagging system that allows admin-authenticated attack...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-52487

#cybersecurity #infosec #cve #euvd
August 3, 2026 at 11:01 PM
euvd-bot.bsky.social
🚨 EUVD-2026-48665
📊 8.6/10
🏢 microweber

📝 Microweber CMS through 2.0.20 contains a server-side template injection vulnerability that allows authenticated administrators to achieve arbitrary OS ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-48665

#cybersecurity #infosec #cve #euvd
July 24, 2026 at 5:00 PM
malwareobserver.bsky.social
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-65694](https://github.com/microweber/microweber/pull/1181)
Microweber CMS through 2.0.2...
https://github.com/microweber/microweber/pull/1181 #PatchManagement #Vulnerability #CVE
July 23, 2026 at 11:58 PM
euvd-bot.bsky.social
🚨 EUVD-2026-48438
📊 8.7/10
🏢 microweber

📝 Microweber CMS through 2.0.20 contains a path traversal vulnerability in the static file controller that allows unauthenticated remote attackers to rea...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-48438

#cybersecurity #infosec #cve #euvd
July 23, 2026 at 11:00 PM
thehackerwire.bsky.social
🟠 CVE-2026-65694 - High (7.5)

Microweber CMS through 2.0.20 contains a path traversal vulnerability in the static file controll...

https://www.thehackerwire.com/vulnerability/CVE-2026-65694/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-65694 - High
July 23, 2026 at 11:00 PM
tom-doerr.bsky.social
https://github.com/microweber/microweber
July 30, 2025 at 2:57 PM
significadode.bsky.social
Significado de #microweber Microwebwe: Unidad de flujo magnético... microweber
December 13, 2024 at 12:43 AM
packetstorm.bsky.social
Microweber 2.0.9 Cross Site Scripting https://packetstorm.news/files/188670 #exploit
January 14, 2025 at 8:25 PM
undercode.bsky.social
The Hidden Dangers in Your CMS: A Deep Dive into 4 New Microweber CVEs

Introduction: Content Management Systems (CMS) like Microweber power millions of websites, making them a prime target for threat actors. The recent assignment of four CVEs to researcher Pranav Jayan highlights the critical need…
The Hidden Dangers in Your CMS: A Deep Dive into 4 New Microweber CVEs
Introduction: Content Management Systems (CMS) like Microweber power millions of websites, making them a prime target for threat actors. The recent assignment of four CVEs to researcher Pranav Jayan highlights the critical need for rigorous security testing in even lesser-known platforms. This article breaks down the technical implications of these vulnerabilities and provides actionable steps for defenders to identify and mitigate similar flaws.
undercodetesting.com
September 16, 2025 at 7:42 AM
cve.skyfleet.blue
CVE-2026-12198 - Microweber API Endpoint thumbnail_img userfiles_path path traversal
CVE ID : CVE-2026-12198

Published : June 15, 2026, 12:16 a.m. | 3 hours, 25 minutes ago

Description : A weakness has been identified in Microweber up to 2.0.20. This affects the function...
CVE-2026-12198 - Microweber API Endpoint thumbnail_img userfiles_path path traversal
A weakness has been identified in Microweber up to 2.0.20. This affects the function userfiles_path of the file /api_nosession/thumbnail_img of the component API Endpoint. Executing a manipulation of the argument cache_path_relative can lead to path traversal. It is possible to launch the attack remotely. The exploit has been made available …
cvefeed.io
June 15, 2026 at 4:07 AM
cve.skyfleet.blue
CVE-2025-60954 - Microweber CMS Weak Password Requirements Vulnerability
CVE ID : CVE-2025-60954

Published : Oct. 24, 2025, 9:16 p.m. | 20 minutes ago

Description : Microweber CMS 2.0 has Weak Password Requirements. The application does not enforce minimum password lengt...
CVE-2025-60954 - Microweber CMS Weak Password Requirements Vulnerability
Microweber CMS 2.0 has Weak Password Requirements. The application does not enforce minimum password length or complexity during password resets. Users can set extremely weak passwords, including single-character passwords, which can lead to account compromise, including administrative accounts.
cvefeed.io
October 24, 2025 at 10:10 PM
cve.skyfleet.blue
CVE-2025-34076 - Microweber CMS Local File Inclusion Vulnerability
CVE ID : CVE-2025-34076

Published : July 2, 2025, 8:15 p.m. | 37 minutes ago

Description : An authenticated local file inclusion vulnerability exists in Microweber CMS versions <= 1.2.11 through misuse...
CVE-2025-34076 - Microweber CMS Local File Inclusion Vulnerability
An authenticated local file inclusion vulnerability exists in Microweber CMS versions
cvefeed.io
July 2, 2025 at 9:11 PM
cve.skyfleet.blue
CVE-2024-33299 - Microweber Cross Site Scripting (XSS)
CVE ID : CVE-2024-33299

Published : Jan. 10, 2025, 8:15 p.m. | 17 minutes ago

Description : Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Na...
CVE-2024-33299 - Microweber Cross Site Scripting (XSS)
Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Name and Last Name parameters in the endpoint /admin/module/view?type=users
cvefeed.io
January 10, 2025 at 8:38 PM
cve.skyfleet.blue
CVE-2024-33297 - Microweber Cross Site Scripting
CVE ID : CVE-2024-33297

Published : Jan. 10, 2025, 8:15 p.m. | 17 minutes ago

Description : Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the campaign Name ...
CVE-2024-33297 - Microweber Cross Site Scripting
Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the campaign Name (Internal Name) field in the Add new campaign function
cvefeed.io
January 10, 2025 at 8:38 PM
cve.skyfleet.blue
CVE-2024-33298 - Microweber Cross Site Scripting
CVE ID : CVE-2024-33298

Published : Jan. 10, 2025, 8:15 p.m. | 17 minutes ago

Description : Microweber Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the cre...
CVE-2024-33298 - Microweber Cross Site Scripting
Microweber Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the create new backup function in the endpoint /admin/module/view?type=admin__backup
cvefeed.io
January 10, 2025 at 8:38 PM
wordmeaningdic.bsky.social
Meaning of #microweber Microwebwe : Magnetic flux unit ... microweber
December 17, 2024 at 12:52 AM
crowncloud.bsky.social
Build websites effortlessly!
Learn how to install Microweber CMS with a LAMP stack on Rocky Linux 8.

Step-by-step guide:
wiki.crowncloud.net?How_to_Insta...

#Microweber #RockyLinux #LAMP
How To Install Microweber CMS With LAMP Stack On Rocky Linux 8
How to Install Microweber CMS with LAMP Stack on Rocky Linux 8
wiki.crowncloud.net
September 11, 2025 at 7:00 AM