microweber vulnerabilities
CVEs whose affected-version data names the microweber package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-34076High· 7.2PoCAn authenticated local file inclusion vulnerability exists in Microweber CMS versions <= 1.2.11 through misuse of the backup management API
An authenticated local file inclusion vulnerability exists in Microweber CMS versions <= 1.2.11 through misuse of the backup management API. Authenticated users can abuse the /api/BackupV2/upload and /api/BackupV2/download endpoints to r…
▾ Midnightmicroweber · microweberEPSS 2.2%via NVD
CVE-2020-23136Medium· 5.5Microweber v1.1.18 is affected by no session expiry after log-out.
Microweber v1.1.18 is affected by no session expiry after log-out.
▾ Sunlitmicroweber · microweberEPSS 0.32%via NVD