Advisories · Technology

microweber.

Every CVE that names microweber among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-67617 CVE record

CVSS 4.8 Medium

Microweber CMS 2.0.20 Stored XSS via tag_names Parameter
- microweber
- Cross-site scripting (XSS)
Not analysed yet 3 Aug 2026
CVE-2026-65693 CVE record

CVSS 8.6 High

Microweber CMS 2.0.20 Server-Side Template Injection via Mail Templates
- microweber
- Code injection
Not analysed yet 24 Jul 2026
CVE-2026-65694 CVE record

CVSS 8.7 High

Microweber CMS 2.0.20 Path Traversal via ServeStaticFileController
- microweber
- Path traversal
Not analysed yet 23 Jul 2026
CVE-2024-58289 CVE record

CVSS 5.3 Medium

Microweber 2.0.15 Stored Cross-Site Scripting via User Profile Fields
- Microweber
- Cross-site scripting (XSS)
Not analysed yet 11 Dec 2025
CVE-2021-32857 CVE record

CVSS 6.1 Medium

Cockpit vulnerable to Cross-site Scripting
- microweber
- Cross-site scripting (XSS)
Not analysed yet 20 Feb 2023