High · 7.6 CVE-2025-51504 EUVD-2025-23365GHSA-2x2j-3c2v-g3c2

Microweber XSS Vulnerability in the homepage Endpoint

Published Aug 1, 2025 · Updated Aug 1, 2025 · Assigned by mitre

Description

Microweber CMS 2.0 is vulnerable to Cross Site Scripting (XSS)in the /projects/profile, homepage endpoint via the last name field.

Ecosystem	Package	Affected	Fixed	Record
Packagist	microweber/microweber	>= 2.0.0, <= 2.0.19	—	GHSA-2x2j-3c2v-g3c2